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Open answer set programming (OASP) is an extension of answer set programming where one 
may ground a program with an arbitrary superset of the program's constants. We define a 
fixed point logic (FPL) extension of Clark's completion such that open answer sets correspond to 
models of FPL formulas and identify a syntactic subclass of programs, called (loosely) guarded 
programs. Whereas reasoning with general programs in OASP is undccidable, the FPL translation 
of (loosely) guarded programs falls in the decidablc (loosely) guarded fixed point logic (/x(L)GF). 
Moreover, we reduce normal closed ASP to loosely guarded OASP, enabling for the first time, a 
characterization of an answer set semantics by /xLGF formulas. 

We further extend the open answer set semantics for programs with generalized literals. Such 
generalized programs (gPs) have interesting properties, e.g., the ability to express infinity axioms. 
We restrict the syntax of gPs such that both rules and generalized literals are guarded. Via 
a translation to guarded fixed point logic, we deduce 2-EXPTlME-completeness of satisfiability 
checking in such guarded gPs (GgPs). Bound GgPs are restricted GgPs with EXPTlME-complete 
satisfiability checking, but still sufficiently expressive to optimally simulate computation tree logic 
(CTL). We translate Datalog LITE programs to GgPs, establishing equivalence of GgPs under an 
open answer set semantics, alternation-free /^GF, and Datalog LITE. 
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1. INTRODUCTION 



In closed answer set programming (ASP) [Gelfond and Lifschitz 1988], a program 
consisting of a rule p{X) <— not q{X) and a fact q(a) is grounded with the program's 
constant a, yielding p(a) <— not q(a) and q(a). This program has one answer set 
{q(a)} such that one concludes that the predicate p is not satisfiablc, i.e., there 
is no answer set of the program that contains a literal with predicate p. Adding 
more constants to the program could make p satisfiable, e.g., in the absence of a 
deducible q(b), one has p(b). However, in the context of conceptual modeling, such 
as designing database schema constraints, this implicit dependence on constants in 
the program in order to reach sensible conclusions is infcasiblc. One wants to be 
able to test satisfiability of a predicate p in a schema independent of any associated 
data, see, e.g., conceptual modeling as in the Object-role Modeling paradigm [Halpin 
2001]. 

For answer set programming, this problem was solved in [Gelfond and Przymusin- 
ska 1993], where fc-belief sets are the answer sets of a program that is extended 
with k extra constants (reasoning with fc-belief sets was shown to be undecidable in 
[Schlipf 1993]). We extended this idea, e.g., in [Heymans et al. 2005b], by allowing 
for arbitrary, thus possibly infinite, universes 1 . Open answer sets are pairs (U,M) 
with M an answer set of the program grounded with U. The above program has an 
open answer set ({x, a}, {q(a),p(x)}) where p is satisfiable. Open Answer Set Pro- 
gramming solves the above conceptual modeling problem, confirmed by the ability 
of Open Answer Set Programming to simulate several expressive Description Logics 
[Heymans et al. 2005b]. Moreover, as it is a rule-based formalism Open Answer 
Set Programming is thus very suitable to function as an integrating formalism of 
Description Logics and Logic Programming. 

Characteristic about (O)ASP is its treatment of negation as failure (naf): one 
guesses an interpretation for a program, computes the program without naf (the 
GL-reduct [Gelfond and Lifschitz 1988]), calculates the iterated fixed point of this 
reduct, and checks whether this fixed point equals the initial interpretation. Wc 
compile these external manipulations, i.e., not expressible in the language of pro- 
grams itself, into fixed point logic (FPL) [Gradel and Walukiewicz 1999] formulas. 
First, we rewrite an arbitrary program as a program containing only one designated 
predicate p and (in)equality; this makes sure that when calculating a fixed point of 
the predicate variable p, it constitutes a fixed point of the whole program. In the 
next phase, such a p-program P is translated to FPL formulas comp(P). comp(P) 
ensures satisfiability of program rules by formulas comparable to those in Clark's 
completion. The specific answer set semantics is encoded by formulas indicating 
that for each atom p(x) in the model there must be a true rule body that motivates 
the atom, and this in a minimal way, i.e., using a fixed point predicate. Negation 
as failure is correctly handled by making sure that only those rules that would be 
present in the GL-reduct can be used to motivate atoms. 

In [Chandra and Harel 1982], Horn clauses were translated to FPL formulas and 
in [Gottlob et al. 2002] reasoning with an extension of stratified Datalog is reduced 
to FPL, but, to the best of our knowledge, this is the first encoding of an answer 



Note that answer sets for programs with (infinite) universes were also considered in [Schlipf 1995] . 
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set semantics in FPL. 

In [Lin and Zhao 2002; Lee and Lifschitz 2003], ASP with (finite) propositional 
programs is reduced to propositional satisfiability checking. The translation makes 
the loops in a program explicit and ensures that atoms p(x) are motivated by bodies 
outside of these loops. Although this is an elegant characterization of answer sets 
in the propositional case, the approach does not seem to hold for OASP, where 
programs are not propositional but possibly ungrounded and with infinite universes. 
Instead, we directly use the built-in "loop detection" mechanism of FPL, which 
enables us to go beyond propositional programs. 

Translating OASP to FPL is thus interesting in its own right, but it also enables 
the analysis of decidability of OASP via decidability results of fragments of FPL. 
Satisfiability checking of a predicate p w.r.t. a program, i.e., checking whether there 
exists an open answer set containing some p(x), is undecidable. It is well-known 
that satisfiability checking in FOL is undecidable, and thus the extension to FPL 
is too[Moschovakis 1974]. However, expressive decidable fragments of FPL have 
been identified [Gradel and Walukiewicz 1999]: (loosely) guarded fixed point logic 
(/i(L)GF) extends the (loosely) guarded fragment (L)GF of FOL with fixed point 
predicates. 

GF is identified in [Andreka et al. 1998] as a fragment of FOL satisfying properties 
such as decidability of reasoning and the tree model property, i.e., every model can 
be rewritten as a tree model. The restriction of quantified variables by a guard, an 
atom containing the variables in the formula, ensures decidability in GF. Guards are 
responsible for the tree model property of GF (where the concept of tree is adapted 
for predicates with arity larger than 2), which in turn enables tree-automata tech- 
niques for showing decidability of satisfiability checking. In [Van Bcnthcm 1997], 
GF is extended to LGF where guards can be conjunctions of atoms and, roughly, 
every pair of variables must be together in some atom in the guard. Satisfiability 
checking in both GF and LGF is 2-EXPTiME-complete [Gradel 1999], as are their 
extensions with fixed point predicates ^GF and /zLGF [Gradel and Walukiewicz 
1999]. 

We identify a syntactically restricted class of programs, (loosely) guarded pro- 
grams ((L)GPs), for which the FPL translation falls in (alternation- free 2 ) /i(L)GF, 
making satisfiability checking w.r.t. (L)GPs decidable and in 2-exptime. In LGPs, 
rules have a set of atoms, the guard, in the positive body, such that every pair of 
variables in the rule appears together in an atom in that guard. GPs are the 
restriction of LGPs where guards must consist of exactly one atom. 

Programs under the normal answer set semantics can be rewritten as LGPs under 
the open answer set semantics by guarding all variables with atoms that can only 
introduce constants from the original program. Besides the desirable property that 
OASP with LGPs is thus a proper decidable extension of normal ASP, this yields 
that satisfiability checking w.r.t. LGPs is, at least, NEXPTiME-hard. 

Datalog lite [Gottlob et al. 2002] is a language based on stratified Datalog with 
input predicates where rules are monadic or guarded and may have generalized 
literals in the body, i.e., literals of the form VY • a =>■ b for atoms a and b. It 
has an appropriately adapted bottom-up fixed point semantics. Datalog lite is 



2 /i(L)GF without nested fixed point variables in alternating least and greatest fixed point formulas. 
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devised to ensure linear time model checking while being expressive enough to 
capture computational tree logic [Emerson and Clarke 1982] and alternation- free 
/i-calculus [Kozcn 1983]. Moreover, it is shown to be equivalent to alternation- 
free fiGF. Our reduction of GPs to alternation-free /iGF ensures that we have a 
reduction from GPs to Datalog lite, and thus couples the answer set semantics to 
a fixed point semantics based on stratified programs. Intuitively, the guess for an 
interpretation in the answer set semantics corresponds to the input structure one 
feeds to the stratified Datalog program. The translation from GPs to Datalog LITE 
needs only one stratum to subsequently perform the minimality check of answer set 
programming. 

The other way around, we reduce satisfiability checking in recursion-free Datalog 
LITE to satisfiability checking w.r.t. GPs. Recursion-free Datalog lite is equivalent 
to GF [Gottlob et al. 2002] , and, since satisfiability checking of GF formulas is 2- 
EXPTlME-hard [Gradel 1999], we obtain 2-EXPTlME-completeness for satisfiability 
checking w.r.t. (L)GPs. 

We next extend programs with generalized literals, resulting in generalized pro- 
grams (gPs). A generalized literal is a first-order formula of the form VY • </> =>■ ip 
where Y is a sequence of variables, <f> is a finite boolean combination of atomic 
formula and ip is an atom. Intuitively, such a generalized literal is true in an open 
interpretation (U,M) if for all substitutions 3 [Y | y], y in U, such that <j)[Y | y] is 
true in M, ip\Y | y] is true in M. 

Generalized literals VY •</>=>■ ip, with <f> an atom instead of a finite boolean 
combination of atomic formula, were introduced in Datalog 4 with the language 
Datalog lite. In open answer set programming (OASP), we define a reduct that 
removes the generalized literals. E.g., a rule 

r : ok <— \/X ■ critical(X) => work(X) 

expresses that a system is OK if all critical devices are functioning: the GeLi-reduct 
(generalized literal reduct) of such a rule for an open interpretation ({xo, ■ ■ •}, M) 
where M contains critical(xi) for even i, contains a rule 

r' : ok <— work(xo), work(x2), ■ ■ ■ 

indicating that the system is OK if the critical devices Xq, x 2 , ■ ■ . are working. The 
GeLi-reduct does not contain generalized literals and one can apply the normal 
answer set semantics, modified to take into account the infinite body. 

Just as it is not feasible to introduce all relevant constants in a program to ensure 
correct conceptual reasoning, it is not feasible, not even possible, to write knowledge 
directly as in r' for it has an infinite body. Furthermore, even in the presence 
of a finite universe, generalized literals allow for a more robust representation of 
knowledge than would be possible without them. E.g., with critical devices y\ and 
y 2 , a rule s : ok <— work{yi ), work(y 2 ) does the job as well as r (and in fact s is the 
GeLi-reduct of r), but adding new critical devices, implies revisiting s and replacing 



3 As usual, for a finite boolean combination of atomic formula £, we use £[Y | y] to denote the 
formula £ where all occurrences of Y are replaced by y. 

4 The extension of logic programming syntax with first-order formulas dates back to [Lloyd and 
Topor 1984]. 
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it by a rule that reflects the updated situation. Not only is this cumbersome, it 
may well be impossible as s contains no explicit reference to critical devices, and 
the knowledge engineer may not have a clue as to which rules to modify. 

One can modify the aforementioned FPL translation of programs without gener- 
alized literals to take into account generalized literals. With this FPL translation, 
we then have again a mapping from one undecidable framework into another undc- 
cidablc framework. We restrict gPs, resulting in guarded gPs (GgPs), such that all 
variables in a rule appear in an atom in the positive body and all generalized literals 
are guarded, where a generalized literal is guarded if it can be written as a guarded 
formula in /iGF. The FPL translation of GgPs then falls into the /iGF fragment, 
yielding a 2-exptime upper complexity bound for satisfiability checking. Together 
with the 2-EXPTiME-complctcness of guarded programs without generalized literals 
this establishes 2-EXPTiME-completeness for satisfiability checking w.r.t. GgPs. As 
a consequence, adding generalized literals to a guarded program does not increase 
the complexity of reasoning. 

We further illustrate the expressiveness of (bound) GgPs by simulating reasoning 
in computational tree logic (CTL) [Emerson 1990], a temporal logic. Temporal 
logics [Emerson 1990] are widely used for expressing properties of nonterminating 
programs. Transformation semantics, such as Hoare's logic are not appropriate 
here since they depend on the program having a final state that can be verified 
to satisfy certain properties. Temporal logics on the other hand have a notion of 
(infinite) time and may express properties of a program along a time line, without 
the need for that program to terminate. E.g., formulas may express that from each 
state a program should be able to reach its initial state: AGEFinitial. 

Two well-known temporal logics are linear temporal logic (LTL) [Emerson 1990; 
Sistla and Clarke 1985] and computation tree logic (CTL) [Emerson 1990; Emerson 
and Halpern 1982; Clarke et al. 1986], which differ in their interpretation of time: 
the former assumes that time is linear, i.e., for every state of the program there 
is only one successor state, while time is branching for the latter, i.e., every state 
may have different successor states, corresponding to nondeterministic choices for 
the program. 

Since CTL satisfiability checking is EXPTlME-complete and satisfiability checking 
w.r.t. GgPs is 2-EXPTiME-complete, a reduction from CTL to GgPs does not seem 
to be optimal. However, we can show that the particular translation has a special 
form, i.e., it is bound, for which reasoning is EXPTlME-complete and thus optimal. 

Finally, we can reduce general Datalog lite reasoning, i.e., with recursion, to 
reasoning with GgPs. In particular, we prove a generalization of the well-known 
result from [Gelfond and Lifschitz 1988] that the unique answer set of a stratified 
program coincides with its least fixed point model: for a universe U, the unique 
open answer set (U, M) of a stratified Datalog program with generalized literals is 
identical 5 to its least fixed point model with input structure id(U), the identity re- 
lation on U. Furthermore, the Datalog lite simulation, together with the reduction 
of GgPs to alternation- free /zGF, as well as the equivalence of alternation- free /zGF 
and Datalog lite [Gottlob et al. 2002], lead to the conclusion that alternation-free 
/iGF, Datalog lite, and OASP with GgPs, are equivalent, i.e., their satisfiability 



5 Modulo equality atoms, which are implicit in OASP, but explicit in Datalog LITE. 
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checking problems can be effectively polynomially reduced to one another. 

GgPs arc thus just as expressive as Datalog lite, however, from a knowledge 
representation viewpoint, GgPs allow for a compact expression of circular knowl- 
edge. E.g., the omni-present construction with rules a(X) <— not b(X) and b{X) <— 
not a(X) is not stratified and cannot be (directly) expressed in Datalog lite. The 
reduction to Datalog lite does indicate that negation as failure under the (open) 
answer set semantics is not that special, but can be regarded as convenient semantic 
sugar. 

The remainder of the paper starts with an introduction of the open answer set 
semantics, fixed point logic, and computation tree logic. In Section 3, we reduce 
satisfiability checking w.r.t. arbitrary logic programs to satisfiability checking of 
alternation-free fixed point logic formulas. We identify in Section 4 syntactical 
classes of programs for which this FPL translation falls into the decidable logic 
^GF or /xLGF, i.e., guarded or loosely guarded fixed point logic. 

In Section 5, we introduce so-called generalized literals and modify the translation 
to FPL in Section 6. Section 7 mirrors Section 4 and identifies classes of programs 
with generalized literals that can be mapped to guarded FPL. In Section 8, we 
relate the obtained languages under the open answer set semantics to Datalog LITE 
which has a least fixed point model semantics. Section 9 discusses a translation 
from CTL to bound guarded programs. Finally, Section 10 contains conclusions 
and directions for further research. 

2. PRELIMINARIES 

2.1 Open Answer Set Programming 

We introduce open answer set programming (OASP) as in [Hcymans et al. 2006b]. 
Constants, variables, terms, and atoms are defined as usual 6 . A literal is an atom 
p(t) or a naf-atom not p(t). 7 The positive part of a set of literals a is a + — {p(t) 
p(t) 6 a} and the negative part of a is aT = {p(t) \ not p(t) G a}. We assume the 
existence of binary predicates = and ^ , where t = s is considered as an atom and 
t ^ s as not t — s. E.g., for a = {X ^ Y, Y = Z}, we have a + = {Y = Z} and 
cT = {X = Y}. A regular atom is an atom that is not an equality atom. For a set 
X of atoms, not X = {not I \ I € X}. 

A program is a countable set of rules a <— f3, where a and f3 are finite sets of 
literals, |a + | < 1, and \/t, s -t = s £ a + , i.e., a contains at most one positive atom, 
and this atom cannot be an equality atom. 8 The set a is the head of the rule 
and represents a disjunction of literals, while (3 is called the body and represents 
a conjunction of literals. If a = 0, the rule is called a constraint. Free rules 
arc rules of the form q(t) V not q(t) <— for a tuple t of terms; they enable a 
choice for the inclusion of atoms. We call a predicate p free if there is a free 
rule p(t) V not p(t) <— . Atoms, literals, rules, and programs that do not contain 
variables are ground. 

For a program P, let cts(P) be the constants in P, vars(P) its variables, and 



6 Note that we do not allow function symbols. 

7 We have no classical negation -i, however, programs with -i can be reduced to programs without 
it, see e.g. [Lifschitz et al. 2001a]. 

8 The condition |a+| < 1 ensures that the GL-reduct is non-disjunctive. 
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preds(P) its predicates. A universe U for P is a non-empty countable 9 superset of 
the constants in P: cts(P) C U. We call P\j the ground program obtained from P 
by substituting every variable in P by every possible constant in U . Let Bp be the 
set of ground regular atoms that can be formed from a ground program P and the 
elements in U. 

Let 7 be a subset of some Bp. For a ground regular atom p(t), we write 7 |= p(t) 
if p(t) E 7; For an equality atom p(t) = t = s, we have 7 |= p(t) if s and t are 
equal constants. We have 7 |= not p(t) if I y= pit). For a set of ground literals 
X, I \= X if I \= I for every ( e I. A ground rule r : a <— /3 is satisfied w.r.t. 7, 
denoted 7 |= r, if 7 |= Z for some I E a whenever 7 |= /3. A ground constraint <— /3 
is satisfied w.r.t. 7 if J ^ /?. For a ground program P without not, 7 is a model 
of P if 7 satisfies every rule in P; it is an answer set of P if it is a subset minimal 
model of P. For ground programs P containing not, the GL-reduct [Gclfond and 
Lifschitz 1988] w.r.t. 7 is defined as P 7 , where P 1 contains a + <— /3 + for a <— /3 in 
P, 7 |= not 0~ and 7 |= a - . 7 is an answer set of a ground P if 7 is an answer set 
of P 1 . 

In the following, a program is assumed to be a finite set of rules; infinite programs 
only appear as byproducts of grounding a finite program with an infinite universe. 
An open interpretation of a program P is a pair (U, M) where U is a universe for 
P and M is a subset of Bp. An open answer set of P is an open interpretation 
(U, M) of P with M an answer set of Pjj . An n-ary predicate p in P is satisfiable 
if there is an open answer set (U, M) of P and a x E U n such that p(x) E M. Wc 
assume that when satisfiability checking a predicate p, p is always non-free, i.e., 
there are no free rules with p in the head. Note that satisfiability checking of a free 
n-ary predicate p w.r.t. P can always be reduced to satisfiability checking of a new 
non-free n-ary predicate p' w.r.t. P U {p'(X) <— p(X.)}. Note that this is a linear 
reduction. 



Example 2.1. Take the program 



ri 


restore(X) <— 


crosft(X),2/(X, F),6ocfc5Mcc(F) 


T2 


backSucc(X) <— 


->crash(X),y(X, Y),not backFail(Y) 


T3 


backFail(X) <- 


not backSucc(X) 


r 4 




y(Y 1 ,X),y(Y 2 ,X),Y 1 + Y 2 


r.5 


y(X, Y) V not y(X, Y) <- 




re 


crash(X) V nof crash(X) <— 




r-t 


-icrash(X) V nof ^cras/i(X) <— 





Rule ri represents the knowledge that a system that has crashed on a particular day 
X (crash(X)), can be restored on that day (restore(X)) if a backup of the system 
on the day Y before (y(X, Y) - y stands for yesterday) succeeded (backSucc(Y)). 
Backups succeed, if the system does not crash and it cannot be established that 
the backups at previous dates failed (r 2 ) and a backup fails if it does not succeed 
(rs). Rule r^ ensures that for a particular today there can be only one tomorrow. 
Rules r 5 , r 6 , and r^ allow to freely introduce y, crash, and ^crash literals. Indeed, 
take, e.g., crash(x) in an interpretation; the GL-reduct w.r.t. that interpretation 

9 Note that U is countable, as later on, this is needed to be able to use a result from [Gradcl 1999] 
that indicates that the fixed point can be reached at the first ordinal ui. 
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contains then the rule crash(x) <— which motivates the presence of the crash literal 
in an (open) answer set. If there is no crash(x) in an interpretation then the GL- 
reduct removes the rule r§ (more correctly, its grounded version with x). Below, 
we formally define rules of such a form as free rules in correspondence with the 
intuition that they allow for a free introduction of literals. 

Every open answer set (U, M) of this program that makes restore satisfiable, i.e., 
such that there is a restore(x) G M for some x G £7, must be infinite. An example 
of such an open answer set M is (we omit U if it is clear from M) 

{resfore(x), crash(x), backFail(x), y(x, x\), 

backSucc(xi) , ^crash(xi) , y(xi, x 2 ) 

backSucc(x2) 7 ^crash(x2) 7 y{x2,x 3 ), . . .} 

One sees that every backSucc literal with element enforces a new y-successor 
Xj_|_i since none of the previously introduced universe elements can be used without 
violating rule r 4 , thus enforcing an infinite open answer set. 

Indeed, assume restore is satisfiable w.r.t. P. Then, there must be a Xo in the 
universe U of some open answer set (U,M) such that restore(xo) G M. With ri, 
we must have that crash{x ) G M, and there must be some X\ G U such that 
y{x 0l x 1 ) G M and backSucc(x 1 ) G M, and thus, with rule r 2 , ^crash(xj) G M, 
y(xj,X2) G M and backFail(x2) M. With crash(xg) G M and -^crash(xi) G 
M, we are sure that x\ ^ x . With r 3 , one must have that backSucc(x2) G M 
such that X2 ^ xo for the same reason. Furthermore, X2 7^ xi, since otherwise 
y(xo,xi) G M and y(xi,xi) G M: with xo 7^ xi this is a contradiction with r^. 
Thus, summarizing, X2 7^ xi and X2 7^ xq. One can continue this way, and one will 
be obliged to introduce new x^'s ad infinitum. 

Rules a <— (3 are such that < 1. This restriction ensures that the GL-reduct 
contains no disjunction in the head anymore, i.e., the head will be an atom or it 
will be empty. This property of the GL-reduct allows us to define an immediate 
consequence operator [van Emden and Kowalski 1976] T that computes the closure 
of a set of literals w.r.t. a GL-reduct. 

For a program P and an open interpretation {U, M) of P, T^' M ^ : Bp v — ► Bp L , 
is defined as T(B) = B U {a \ a <- (3 G P^f A B \= /?}. Additionally, we define 
T°(B) = B, and T n+1 (B) = T(T n (B)). w 

Although we allow for infinite universes, we can motivate the presence of atoms 
in open answer sets in a finite way, where the motivation of an atom is formally 
expressed by the immediate consequence operator. 

Theorem 2.2. Let P be a program and (U, M) an open answer set of P. Then, 
Ma G M ■ 3n < 00 ■ a G T n . 

For the relation of OASP with other logic programming paradigms that allow for 
(some form of) opennes, we refer to [Heymans et al. 2006b]. 



10 We omit the sub- and superscripts (U, M) and P from Tp ' if they are clear from the context 
and, furthermore, we will usually write T instead of T(0). 



8 



2.2 Fixed Point Logic 

Extensions of first-order logic (FOL) that allow for the expression of recursive 
procedures are well-investigated in finite model theory, see e.g., [Moschovakis 1974; 
Immerman 1986]. Also in the presence of infinite models, so-called fixed point logic 
(FPL) proves to be an interesting logic [Flum 1999]. E.g., a decidable subclass 
of FPL is the guarded fixed point logic [Gradel and Walukiewicz 1999], which lifts 
propositional u-calculus [Kozen 1983] to a first-order setting. 

We assume FOL interpretations are represented as pairs (U, M) where M is an 
interpretation over the domain U. Furthermore, we consider FOL with equality 
such that equality is always interpreted as the identity relation over U. 

We define fixed point logic (FPL) along the lines of [Gradel and Walukiewicz 
1999], i.e., as an extension of first-order logic, where formulas may additionally be 
fixed point formulas of the form 

[LFP WX..ip(W,X.)](X.) or [GFP WX.r/>(W,X)](X) , (1) 

where W is an n-ary predicate variable, X is an n-ary sequence of distinct variables, 
ip(W,X.) is a (FPL) formula with all free variables contained in X and W appears 
only positively in ip(W, X). 11 

For an interpretation (U, M) and a valuation \ °f the free predicate variables, 
except W, in ip, we define the operator ip( u > M )'X : 2 U — > 2 U on sets S of n-ary 
tuples 

^u,m),x {s) = {x e [/" | (U,M),xl> {W S} \= i,{W, x)} , (2) 

where x U {PF ^ S 1 } is the valuation \ extended such that the extension of W is 
assigned to S. If ip(W,'X.) contains only the predicate variable W, we often omit 
the valuation \ an d write just ip( u,M \ By definition, W appears only positively 
in ip such that ip( u ' M )>* j s monotonic on sets of n-ary [/-tuples and thus has a 
least and greatest fixed point [Tarski 1955], which we denote by LFP(ip^ u,M ^' x ) 
and GFP(V> (t/ ' M) ' x ) respectively. Finally, we have that 

(U,M),x \= [LFP WX.il>(W,X)](x) <=> x e LFP(V> (C/ ' M) ' X ) , (3) 

and similarly for greatest fixed point formulas. We call an FPL sentence (i.e., an 
FPL formula without free variables) alternation-free if it does not contain subfor- 
mulas ^ = [LFP TX.^](X) and 6 = [GFP SY.rj\(Y) such that T occurs in r\ and 6 
is a subformula of ip, or S occurs in <p and ip is a subformula of 77. We can eliminate 
greatest fixed point formulas from a formula, by the equivalence: 

[GFP WJi.il)] = -[LFP WX..-«I>\W/-W]] , (4) 

where -iVI^/ - ' 1 ^] ls ^ with W replaced by -W . If we thus remove greatest fixed 
point predicates, and if negations appear only in front of atoms or least fixed point 
formulas, then a formula is alternation-free iff no fixed point variable W appears in 
the scope of a negation. 



11 A formula tp is in negation- normal form if the only used connectives are A, V, and -i, and —• only 
appears in front of atoms. Let tp be a formula in negation-normal form. A predicate p appears 
then only positively in ip if there is no -^p in tp. 
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As in [Gradel 2002a], we define 

^(u,M) T a + i = ^(UM)^(UM) T a) for ordina i s a 
^(UM) | /? = (J (^^ t for limit ordinals (3 

Furthermore, since tp^ u ' M ^ is monotone, we have that %j)( u > M } | C ^>( C/ ' M ) | 1 C . . . 
and there exists a (limit) ordinal a such that | a = LFP(V> (C/,M) ). 

Example 2.3. Take the conjunction of the following formulas, i.e., the infinity 
axiom 12 from [Gradel and Walukiewicz 1999]: 

3X,Y-F(X,Y) (5) 
\fX,Y-(F(X,Y)^(3Z-F(Y,Z))) (6) 
VA, Y ■ F(X, Y ) => [LFP TTA.VF • F(T, X) => W{Y)] (X) (7) 

A model of these formulas contains at least one F(x,y) (by formula (5)), which 
then leads to a F-chain by formula (6). Formula (7) ensures that each element x is 
on a well-founded chain (and thus formula (6) actually generates an infinite chain) . 

2.3 Computation Tree Logic 

We introduce in this subsection the temporal logic computation tree logic (CTL) 
[Emerson 1990; Emerson and Halpern 1982; Clarke et al. 1986]. Let AP be the 
finite set of available proposition symbols. CTL formulas are defined as follows: 

— every proposition symbol P G AP is a formula, 
— if p and q are formulas, so are p Aq and ->p, 

— if p and q are formulas, then EXp, E(p U q), AXp, and A(p U q) are formulas. 

The semantics of a CTL formula is given by (temporal) structures. A structure K 
is a tuple (S, R, L) with S a countable set of states, R C S x S & total relation in 
S, i.e., Vs G S ■ 3t G S ■ (s, t) G R, and L : S — > 2 AP a function labeling states with 
propositions. Intuitively, S is a set of states, R indicates the permitted transitions 
between states, and L indicates which propositions are true at certain states. 

A path 7r in K is an infinite sequence of states (so, s i, • • •) such that (s^-i, Sj) G R 
for each i > 0. For a path 7r = (so, si, . . .), we denote the element Si with 7Tj. For a 
structure K = (S, R,L), a state s G 5, and a formula p, we inductively define when 
if is a model of p at s, denoted K,s \= p: 

—K, s^PiSP G L(s) for P G AP, 

— K, s \= ->p iff not if, s |= p, 

— if, s |= p A q iff K, s \= p and K, s \= q, 

— K, s \= EXp iff there is a (s, t) G R and K , t \= p, 

—K, s \= AXp iff for all (s, t) e R, K,t\= p, 



An infinity axiom is a formula that has only infinite models (if it has models). 
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— K, s \= E(p U q) iff there exists a path tt in K with n = s and 3k > • (if, 7Tfc |= 
gAVj <k-K,Wj \=p), 

— X, s |= A(p U q) iff for all paths n in K with 7r = s we have 3fc > • (K, TTk |= 
gAVj <k-K,TTj \=p). 

Intuitively, X, s \= EXp (K, s \= AXp) can be read as "there is some neXt state where 
p holds" ("p holds in all next states"), and K,s \= E(p U q) (K,s \= A(p U q)) as 
"there is some path from s along which p holds Until q holds (and q eventually 
holds)" ("for all paths from s, p holds until q holds (and q eventually holds)"). 

Some common abbreviations for CTL formulas are EFp = E(true U p) (there is 
some path on which p will eventually hold), AFp = A(true U p) (p will eventually 
hold on all paths), EGp = ^AF-ip (there is some path on which p holds globally), 
and AGp = ^EF^p (p holds everywhere on all paths). Furthermore, we have the 
standard propositional abbreviations pV q = ~^{^p A ^q), p => q = ->p V q, and 
P q = (P => q) A (q =>p). 

A structure if = (5, R, L) satisfies a CTL formula p if there is a state s € S such 
that if, s |= p; we also call K a model of p. A CTL formula p is satisfiable iff there 
is a model of p. 

Example 2.4. Consider the expression of absence of starvation t => AFc [Clarke 
et al. 1986] for a process in a mutual exclusion problem 13 . The formula demands 
that if a process tries (t) to enter a critical region, it will eventually succeed in 
doing so (c) for all possible future execution paths. 

We will usually represent structures by diagrams as in Figure 1, where states are 
nodes, transitions between nodes define R, and the labels of the nodes contain the 
propositions true at the corresponding states. E.g., take the structure K = (S, R, L) 
with 

—S = {s ,si,s 2 }, 

—R = {(s , s ), (s , si), (si, s 2 ), (s 2 , s )}, and 
— L(s ) = i(si) = t, L(s 2 ) = c, 

which is represented by Figure 1. This structure does not satisfy t =4- AFc at so 
since on the path (s ,s ,...) the proposition c never holds. We have, however, 
K, si |= t =$> AFc: t holds at si such that we must have that on all paths from 
si the proposition c must eventually hold; since the only path from si leads to s 2 
where c holds, t ^ AFc holds at s x . We also have K,s 2 \= t => AFc, since t £ L(s 2 )- 

Theorem 2.5 [Emerson 1990]. The problem of testing satisfiability for CTL 
is complete for deterministic exponential time. 



13 In the mutual exclusion problem, we have two or more processes that want to access a critical 
section of code, but cannot do this at the same time. The problem is then how to model the 
behavior of the processes (or the concurrent program in general), such that this mutual exclusion 
is never violated. For more details, we refer to, e.g., [Emerson and Clarke 1982; Emerson 1990; 
Clarke et al. 1986; Attie and Emerson 2001; Huth and Ryan 2000; Manna and Wolper 1984]. 
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Fig. 1. Example Structure t =>• AFc 

3. OPEN ANSWER SET PROGRAMMING VIA FIXED POINT LOGIC 

In this section, we will show how the external manipulations to define the (open) 
answer set semantics can be compiled into fixed point logic, so allowing in the next 
sections to analyse the decidability of OASP via the various decidability results of 
fragments of FPL. 

We assume, without loss of generality, that the predicates in a program P are 
differently named than the constants in P and that each predicate q in P has one 
associated arity, e.g., q{x) and q(x,y) are not allowed. 

Definition 3.1. A program P is a p-program if the only predicate in P different 
from the (in)equality predicate is p. 

For a program P, let in(Y) = {Y ^ a \ a G preds(P)L){0}}, i.e., a set of inequalities 
between the variable Y and the predicates in P as well as a new constant 0. For a 
sequence of variables Y, we have in(Y) = LiYe'viTi(Y). 

For a predicate name p not appearing in an arbitrary program P, we can rewrite 
P as an equivalent p-program P p by replacing every regular m-ary atom q(t) in P 
by p(t, 0, q) where p has arity n, with n the maximum of the arities of predicates in 
P augmented by 1, is a sequence of new constants of length n — m—1, and q is a 
new constant with the same name as the original predicate. Furthermore, in order 
to avoid grounding with the new constants, we add for every variable X in a non- 
free rule r € P and for every newly added constant a in P p , X ^ a to the body. The 
rule in P p corresponding to r : a <— j3 G P is denoted as r p : a p <— /3 P , m(X) G P p 
for vars(r) = X. 

Example 3.2. Take a program P: 

h(a,b) <- q(X) 
q(X) V not q(X) <- 

<- q(a) 

- q(b) 

For a universe J7 = {x, a, b} of P, we have the open answer sets Mi = ([/, 0) and 
M 2 = (U, {q(x),h(a, &)}). The translation P p is 

p(a,b,h) «- p{X,0,q),X±0,X±h,X±q 
p(X, 0, q) V not 0, c?) <- 

<- p(a, 0, g) 
p(6,0,?) 

The open answer sets of this program can then be rewritten as open answer sets of 
the original program (by leaving out all "wrong" literals p(q, 0, q),p(0, 0, q),p(h, 0, q) 
that can be generated by the free rule). 
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Theorem 3.3. Let P be a program, p a predicate not in P, and q a predicate in 
P. q is satisfiable w.r.t. P iff there is an open answer set (U',M') of the p -program 
P p with p(x, 0,q) G M'. 

Proof. For the "only if direction, assume (U,M) is an open answer set of 
P that satisfies q, i.e., there is a q(x) G M. Let V = U U preds(P) U {0} and 
M' = {p(x, 0, q) | g(x) G M}). Then (U',M') is an open interpretation of P p and 
p(x, 0, q) G M'. One can show that (U 1 , M 1 ) is an open answer set of P p . 

For the "if direction, assume ([/', M') is an open answer set of P p with p(x, 0, q) G 
M' . Define £/ = U' \(preds(P) U {0}) and M = {q(x) | p(x,0,g) G M' A x (~1 
{preds(P) U {0}) = 0}. 

We can assume that q is a non-free predicate (and we assume this throughout 
the rest of this paper). Then there are no free rules with a q(t) in the head such 
that there are no free rules with a p(t,0,q) in the head in P p . Since there is 
a p(x, 0, q) G M', and ([/', M') is an open answer set, there must be a rule r[] 
in {P p )u, 14 such that M' |= m(Y)[] for Y the variables in the corresponding 
ungrounded rule r. Thus x n (preds(P) U {0}) = 0, such that q(x) G M, by 
definition of M. 

One can show that (U, M) is an open answer set of P. □ 

The translation of a program to a p-program does not influence the complexity of 
reasoning. 

Theorem 3.4. Let P be a program and p a predicate not in P. The size 15 of 
P p is polynomial in the size of P. 

Proof. The size of a rule r G P is of the order v + k, with v the number of 
variables and k the number of predicate names in r. The corresponding r p then 
contains an extra v x n inequality atoms for n = \preds(P) U {0}|, and the size of 
r p is thus in general quadratic in the size of r. □ 

By Theorems 3.3 and 3.4, we can focus, without loss of generality, on p-programs 
only. Since p-programs have open answer sets consisting of one predicate p, fixed 
points calculated w.r.t. p yield minimal models of the program as we will show in 
Theorem 3.8. 

In [Chandra and Harel 1982], a similar motivation drives the reduction of Horn 
clauses 16 to clauses consisting of only one defined predicate. Their encoding does 
not introduce new constants to identify old predicates and depends entirely on 
the use of (in)equality. However, to account for databases consisting of only one 
element, [Chandra and Harel 1982] needs an additional transformation that unfolds 
bodies of clauses. 



14 For objects o (rules, (sets of) literals, . . . ), we denote with o[Yi|j/i, . . . , the grounding of o 

where each variable Yj is substituted with yi . Equivalently, we may write o[Y|y] for Y = Yi , . . . , Yj 
and y = 2/1, ■ • • , £/d, or o[] if the grounding substitution is clear from the context, or if it does not 
matter what the substitution exactly looks like. 

15 In the rest of the paper we use n X s for the size of a program P, where n is the number of rules 
in P and s is the maximum size of the rules in P. 

16 Horn clauses are rules of the form a <— fi where (3 is a finite set of atoms (i.e., negation as failure 
is not allowed). 
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We can reduce a p-program P to equivalent formulas comp(P) in fixed point 
logic. The completion comp(P) of a program P consists of formulas that demand 
that different constants in P are interpreted as different elements: 

a ,6 b (8) 

for every pair of different constants a and b in P, and where a =/= b = ^(a = b). 
comp(P) contains formulas ensuring the existence of at least one element in the 
domain of an interpretation: 

3X ■ true . (9) 

Besides these technical requirements matching FOL interpretations with open in- 
terpretations, comp(P) contains the formulas in fix(P) = sat(P) Ugl(P) Uf pf (P), 
which can be intuitively categorized as follows: 

— sat(P) ensures that a model of f ix(P) satisfies all rules in P, 

— gl(P) is an auxiliary component defining atoms that indicate when a rule in P 

belongs to the GL-reduct of P, and 
— f pf (P) ensures that every model of f ix(P) is a minimal model of the GL-reduct 
in P; it uses the atoms defined in gl(P) to select, for the calculation of the fixed 
point, only those rules in P that are in the GL-reduct of P. 

We interpret a naf-atom not a in a FOL formula as the literal ->a. Moreover, we 
assume that, if a set X is empty, /\ X = true and V X = false. In the following, 
we assume that the arity of p, the only predicate in a p-program is n. 

Definition 3.5. Let P be a p-program. The fixed point translation of P is 
fix(P) = sat(P) Ugl(P) U fpf(P), where 

(1) sat(P) contains formulas 

VY-/\/3^\/ a ( 10 ) 
for rules a <— [3 6 P with variables Y, 

(2) gl(P) contains the formulas 

VY • r(Y) & f\ oT A f\ -./T (11) 

for rules r:a^/3e P 17 with variables Y, 

(3) fpf (P) contains the formula 

VX ■ p(X) => [LFP WX.<P( W, X)] (X) (12) 

with 

(j>(W, X) = VF(X) V \/ E{r) (13) 

r:p(t)Va«-/?£P 

and 

E{r) = 3Y • X 1 = h A . . . A X n = t n A f\ f3+[p\W} A r(Y) (14) 

where X = X\, . . . , X n are n new variables, Y are the variables in r, W is a 
new (second-order) variable and /3 + [p|VF] is fi + with p replaced by W. 



We assume that rules are uniquely named. 
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The completion of P is comp(P) = f ix(P) U {(8), (9)}. 

The predicate W appears only positively in (f>(W, X) such that the fixed point 
formula in (12) is well-defined. By the first disjunct in (13), we have that applying 
the operator (f>( u > M ) (see pp. 9) to an arbitrary set S C U n does not lose information 
from S. 

Theorem 3.6. Let P be a p-program and (U, M) an interpretation with S C U". 
Then 

Proof. Take xeS, then (U, M), W -> S \= W(x), such that, by (13), we have 
(t/,M),W-> S \= <j)(W,x). Thus, by (2), we have that x G ^ U ' M \S). □ 

Example 3.7. Take a p-program P 

r: p{X) <- p(JT) 

The completion comp(P) contains the formulas 3X - true, together with f ix(P) = 
sat(P) U gl(P) U fpf (P), where 

sat(P) = {VX • p(X) p(X)} , 

ensuring that r is satisfied, and 

gl(P) = {VX • r(X) true} , 

saying that r belongs to every GL-reduct since there are no naf-atoms. Finally, 

fpf(P) = {VX X -ppG) [LFP WJT J .0(W,jr J )](JT J )} , 

with 

0(W, Xi) = V • Xi = X A T4^(X) A r(X) . 

The formula fpf (P) ensures that every atom in a FOL interpretation is motivated 
by a fixed point construction, using the available rule p(X) <— p(X). 

Theorem 3.8. Let P be a p-program. Then, (U,M) is an open answer set of P 
iff (U, M U R) is a model of f\ comp(P), where 

R = {r(y) | r[Y\ y] : aQ <- /?[] e P Vl M |= U not /3Q~, uors(r) = Y"} . 

Proof. Denote MUfias M'. 
| =>■ | For the "only if direction, assume (U, M) is an open answer set of P. We 
show that (U, M') is a model of comp(P). It is not too difficult to show that (U, M') 
is a model of (8), (9), sat(P), and gl(P). We also have that (U,M') is a model 
of fpf (P). Indeed, take x for X and assume p(x) e M' . Thus, p(x) G M. Since 
(!7, M) is an open answer set we have that p(x) G T n for some n < oo. 

Claim 3.9. x G ^ ir ' M ') | n, n < oo. 

We prove the claim by induction on n. 

n = 1 fSase siepj. If p(x) G T 1 there is some r' : p(x) <— G P^ f originating 
from r : p(t) V a <— f3 G P with variables Y = Y\, . . . , Yd such that for [Y|y], 
r[] = r' (and thus ti[] = Xi for 1 < i < n). Furthermore, we have 
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-0M+D 18 , 

—M \= a~[], and 
—M \= not /?"[]• 

Thus /\ a" [] and /\ [] are true in M', such that, by definition of M', r(y) G M'. 
It follows immediately that P(r) is true in M'. Since |= /?+[] wc do not use W to 
deduce the latter, such that (U, M'), W -> \= 4>{W, x), and thus x G ^ M '\9) = 

(Induction). Assume for every p(u) G T" _1 that u G (j)^ u ' M ) | n — 1, n— 1 < oo. 
From p(x) G T™, we have some r' : p(x) /3 + [Y|y] G originating from 
r : p(t)Va <— /3 G P with variables Y = Yi,...,Y<j and such that for [Y|y], 
r[] = r' (and thus tjQ = Xi for 1 < i < n). Furthermore, we have 
-T"" 1 1=^+0, 
— M |= a~[], and 
—M \= not /?"[]. 

Thus A a - [] and A [] arc true in M' , such that, by definition of M', r(y) G M'. 
Since P is a p-program /3 contains only p-literals and (in)equalities. Furthermore, 
the equalities in /?+[] are true in M' . For every regular p(u) G /? + [], we have that 
p(u) G T n_1 , and thus, by induction, that u G 0<^ M ') f n - 1. Wc have that 
(U,M'),W -» 0(^ M ') t n - 1 h S(r)pC|x], such that (C/,M'),VF -► ^W^') f 
n - 1 f= <f>(W,x). Thus x G 0(^ M ') t n. 

From x G 0( U ' M ') | " < oo, we have that x G (j>( u ' M "> | n C 0W M ') f a , 
for a limit ordinal a such that ^ U ' M "> | Q = LFP(<f>( u ' M ">). Then, we have that 
x G LFP(0(' 7 ' M ')), and consequently, [LFP WX..<f>(W, X)](x) is true in (17, M') such 
that (12) is satisfied. 

| <= | For the "if direction, assume (U, M') is a model of comp(P). Wc show that 
(U, M) is an open answer set of P. Denote {x | p(x) G M} as M. 

(1) From (8) and (9), we have that U is non-empty and interprets different con- 
stants as different elements. We assume that the elements that interpret the 
constants in U have the same name as those constants. 

(2) M = LFP(0(^ M ')). 
—M^^ M '\M)_ 

—M C 4>( U > M '\M). Immediate, with Theorem 3.6. 

— ~M D (j>( u ' M ')(M). Assume x G ^ U > M ">(M). Then by (2), wc have that 
(U,M'),W -> M \= </>(W,x). Thus, by (13), we have cither that x G M, 
which means we are done, or there is a r : p(t) V a ^ /3 e P such that 
(U, M'), W -> M \= P(r)[X|x]. 
Then, there exist [Y|y] with 

- x = tD, 

-(U,M'),W -> M \= (3+[p\W}[], such that M' \= /?+[], and 

— r (y) G M', from which, since M' is a model of gl(P), we have that 

M' |= A a- [] and M' \= A ->0~ []• 
Since M' is a model of sat(P) we then have that p(t)[] G M' and thus 
p(x) G M, such that x G M. 



'/3+ may contain equalities but no regular atoms. 
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— M is a least fixed point. Assume there is a Y C {/" such that Y = <j)( u ' M ) (Y). 
We prove that M C Y. Take x G M, then p(x) G M'. Since M' is a model 
of fpf (P), we have that x G LFP^^')). And since LFP(0( c/ ' M ')) C Y, 
we have that x G Y. 

(3) M is a model of Pff . Take a rule r' : p(x) <— /3+[Y|?/] G P^ f originating from 
r : p(t) V a <— (3 G P with variables Y = Yi, . . . , Yd and such that for [Y|y], 
r[] = r' (and thus ^[] = a;^ for 1 < i < n). Furthermore, we have 

-M 1=0-0, 
—M \= not /J-Q. 

Assume M |= /?+ [] , we then have that 
-M' 1=0-0, 
— M' h^oi /?-[], 

-M'h n 

Since M' is a model of sat(P), we then have that p(x) G M', and thus p(x) G 
M. 

(4) M is a minimal model of P^f . Assume not, then there is a N C M, AT a model 
of P^ . Take A = {x | p(x) G N}, one can then show that A is a fixed point of 
4>( U ' M '\ i.e., N = (j>( u,M ">(N). Since M = LFP(0(^ M ')), we have that MCA, 
which is a contradiction with A C M, and M is indeed a minimal model of 



□ 

Example 3.10. For a universe U — {x} we have the unique open answer set 
(U, 0) of P in Example 3.7. Since U is non-empty, every open answer set with a 
universe U satisfies 3X ■ true. Both (U,M\ = {p(x),r(x)}) and {U,M 2 = {r(x)}) 
satisfy sat(P) U gl(P). However, LFP(<^ Ml )) = LFP(^ U ' M ^) = 0, such that 
only (U, M 2 ) satisfies fpf(P); (U,M 2 ) corresponds exactly to the open answer set 
(U, 0) of P. 

The completion in Definition 3.5 differs from Clark's completion [Clark 1987] both in 
the presence of the fixed point construct in (12) and atoms representing membership 
of the GL-reduct. For p-programs P Clark's Completion ccomp(P) does not contain 
gl(P) and fpf (P) is replaced by a formula that ensures support for every atom by 
an applied rule 

VX-p(X)^ \/ D(r) 

r:p(t)Vai—l3eP 

with 

D{r) = 3Y • Xi = ti A . . . A X n = t n A /\ (3 A /\ a~ . 

Program P in Example 3.7 is the open ASP version of the classical example p <— p 
[Lee and Lifschitz 2003]. There are FOL models of ccomp(P) that do not correspond 
to any open answer sets: both ({x}, {p(x)}) and ({x}, 0) are FOL models while only 
the latter is an open answer set of P. The next example shows the translation to 
FPL in detail. 
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Example 3.11. Take the p-program P corresponding to the program consisting 
of the rules a <— not b and b <— not a, i.e. 

r t : p(X, a) <- not i),I/s,l/4 
r 2 : b) <- not a), X ^ a, X ^ 6 

which has, for a universe U = {x, a, b}, two open answer sets Mi = {p(x, a)} and 
M 2 = {p(x,b)}. sat(P) contains the formulas 

VX ■ -,p(X, b)AX^aAX^b^ p(X, a) , 

and 

VX ■ -,p(X, a)M^aM/l)4 p(X, b) . 

gl(P) is defined by the formulas MX ■ n (X) ^ ->p(X, b)AX^aAX^b and 
VX ■ rg(X) & ->p(X, a)M/aAX/l. Finally, fpf (P) is 

VX 1 ,X 2 -p(X 1 ,X 2 ) => [LFP WX u X 2 .<j>{W,X u X 2 )](X u X 2 ) 

with 

cj>(W,X 1 ,X 2 ) = W(X 1 ,X 2 ) 

V 3X ■ Xi = X A X 2 = a A n(X) 

V 3X ■ X 1 = X A X 2 = b A r 2 (X) . 

To satisfy sat(P) a model must contain p(x,a) or p(x,b). Taking into account 
gl(P), we then distinguish three different classes of models, represented by 

M 'i h {p{x,a),^p(x,b),r 1 (x),->r 2 (x)} , 
M 2 h {^P{x,a),p{x,b),^r 1 {x),r 2 {x)} , 
M 3 h {p(x,a),p(x,b),->r 1 (x),->r 2 (x)} . 

Now, we have that IFP(^ U ' M ^) = 0, such that fpf(P) is not satisfied by M3. 
Furthermore, LFPO^*^) = {(x, a)} and LFP^'^)) = {(x, 6)}. Thus, in order 
to satisfy fpf(P), we have that M[ = {p(x, a), r\(x)} and M' 2 = {p(x,b),r 2 (x)}, 
which correspond to the open answer sets of P. 

Note that this example also shows that writing knowledge down in Logic Pro- 
gramming style is easier and more intuitive than the corresponding FPL translation. 

Theorem 3.12. Let P be a p-program. The size of /\ comp(P) is quadratic in 
the size of P. 

Proof. If the number of constants in a program P is c, then the number of 
formulas (8) is \c{c — 1), which yields the quadratic bound. The size of sat(P) is 
linear in the size of P, as is the size of gl(P) (with |P| new predicates). Finally, 
each E(r) in fpf (P) is linear in the size of r, such that fpf (P) is linear in the size 
of P. □ 

Theorem 3.13. Let P be a program, p a predicate not appearing in P, and q 
an n-ary predicate in P. q is satisfiable w.r.t. P iff p(X, 0,q) A f\ comp(P p ) is 
satisfiable. Moreover, this reduction is polynomial in the size of P. 
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Proof. Assume q is satisfiable w.r.t. P. By Theorem 3.3, we have that p(x, 0, q) 
is in an open answer set of P p , such that, with Theorem 3.8, p(x, 0, q) is in a model 
of comp(Pp). 

For the opposite direction, assume p(X, 0, q) A /\ comp(P p ) is satisfiable. Then 
there is a model (U, M') of A comp(P) with p(x, 0, q) e M 1 . We have that M' = 
M U i? as in Theorem 3.8, such that (U, M) is an open answer set of P p and 
p(x, 0, q) G M. From Theorem 3.3, we then have that q is satisfiable w.r.t. P. 

By Theorem 3.12, the size of [\ comp(P p ) is quadratic in the size of P p . Since 
the size of the latter is polynomial in the size of P by Theorem 3.4, the size of 
/\ comp(Pp) is polynomial in the size of P. □ 

4. GUARDED OPEN ANSWER SET PROGRAMMING 

In this section, we will identify a syntactically restricted class of programs such that 
the translation to FPL falls within a dccidable fragment of FPL and which enables 
us to devise some complexity result for satisfiability checking. Intuitively, rules will 
be equipped with a guard, i.e. a set of atoms, in the positive body, such that every 
pair of variables in the rule appears together in an atom in that guard. 

We repeat the definitions of the loosely guarded fragment [Van Benthem 1997] 
of first-order logic as in [Gradel and Walukiewicz 1999]: The loosely guarded 
fragment LGF of first- order logic is defined inductively as follows: 

(1) Every relational atomic formula belongs to LGF. 

(2) LGF is closed under -pro-positional connectives -i, A, V, =>■, and 

(3) If il>(X, Y) 19 is in LGF, and a(X, Y) = cti A . . . A a m is a conjunction of 
atoms, then the formulas 

3Y- a(X, Y) A tp(X, Y) 
VY-a(X, Y) =>- ip(X, Y) 

belong to LGF (anda(X, Y) is the guard of the formula) , provided that free{ip) C 
free(a) = X U Y and for every quantified variable Y G Y and every variable 
Z G JU Y there is at least one atom aj that contains both Y and Z ( where 
free(tp) are the free variables ofip). 

The loosely guarded fixed point logic /xLGF is LGF extended with fixed point formu- 
las (1) where il>{W,~K) is a /iLGF formula such that W does not appear in guards. 
The guarded fragment GF is defined as LGF but with the guards a(X, Y) atoms 
instead of a conjunction of atoms. The guarded fixed point logic /«GF is GF ex- 
tended with fixed point formulas where tp(W,'X.) is a [iGF formula such that W 
does not appear in guards. 

Example 4.1. The infinity axiom in Example 2.3 (pp. 10) is a /iGF formula 
where all the formulas are guarded by F(X, Y). 

Example 4.2 [Gradel and Walukiewicz 1999]. Take the formula 

3Y ■ X < Y A (f(Y) A (\/Z ■ (X < Z A Z < Y) => ij>(Z)) . 



19 Recall that i/>(X, Y) denotes a formula whose free variables are all among XUY ([Andreka et al. 
1998], pp. 236). 
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This formula is not guarded as the formula \/Z ■ (X < Z A Z < Y) => tp(Z) has no 
atom as guard. It is however loosely guarded. 

Definition 4.3. A rule r : a <— is loosely guarded if there is a 7b C + such 
that every two variables X and Y from r appear together in an atom from 7;,; we 
call 7b a body guard of r. It is fully loosely guarded if it is loosely guarded and there 
is a lh Q a ~ snch that every two variables X and Y from r appear together in an 
atom from 7^; 7^ is called a head guard of r. 

A program P is a (fully) loosely guarded program ( (F)LGP) if every non-free rule 
in P is (fully) loosely guarded. 

Example 4.4. The rule in Example 3.7 is loosely guarded but not fully loosely 
guarded. The program in Example 3.11 is neither fully loosely guarded nor loosely 
guarded. A rule 

a{X) V not g(X, Y,Z) <- not b(X , Y),f(X, Y),f(X,Z),h{Y,Z),not c(Y) 
has a body guard {f(X, Y), f(X, Z), h(Y, Z)} and a head guard {g(X, Y, Z)}. 

Definition 4.5. A rule r : a <— is guarded if it is loosely guarded with a 
singleton body guard. It is fully guarded if it is fully loosely guarded with body 
and head guards singleton sets. 

A program P is a (fully) guarded program ((F)GP) if every non-free rule in P is 
(fully) guarded. 

In [Gradel et al. 2002] it is noted that a singleton set {b} C U for a universe U 
is always guarded by an atom b = b. With a similar reasoning one sees that rules 
with only one variable X can be made guarded by adding the guard X = X to the 
body. E.g., a(X) <— not b{X) is equivalent to a(X) <— X = X, not b(X). 
Every F(L)GP is a (L)GP, and we can rewrite every (L)GP as a F(L)GP. 

Example 4.6. The rule p(X) <— p(X) can be rewritten as p(X) V not p{X) <— 
p(X) where the body guard is added to the negative part of the head to function 
as the head guard. Both programs are equivalent: for a universe U, both have the 
unique open answer set {U,%). 

Formally, we can rewrite every (L)GP P as an equivalent F(L)GP P i , where P l is 
P with every a <— replaced by a U not + 4— 0. 

One can consider the body guard of a rule in a loosely guarded program P as 
the head guard such that P f is indeed a fully (loosely) guarded program. 

Theorem 4.7. Let P a (L)GP. Then, P l is a F(L)GP. 

PROOF. Let P be a (L)GP. We show that every non-free rule r : a U not + <— 
G P l is fully (loosely) guarded. Since a <— is a non-free rule of P, we have 
that there is a body guard 75 C /?+, and thus r is (loosely) guarded. Furthermore, 
76 C (a U not /?+) such that jb is a head guard of r and r is fully (loosely) 
guarded. □ 

A rule is vacuously satisfied if the body of a rule in P f is false and consequently the 
head does not matter; if the body is true then the newly added part in the head 
becomes false and the rule in P f reduces to its corresponding rule in P. 
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Theorem 4.8. Let P be any program (not necessarily guarded). An open inter- 
pretation (U, M) of P is an open answer set of P iff (U, M) is an open answer set 
ofP { . 

Since we only copy (a part of) the bodies to the heads, the size of P f only increases 
linearly in the size of P. 

Theorem 4.9. Let P be any program (not necessarily guarded). The size of P i 
is linear in the size of P. 

We have that the construction of a p-program retains the guardedness properties. 

Theorem 4.10. Let P be any program (not necessarily guarded). Then, P is a 
(F)LGP iffP p is a (F)LGP. And similarly for (F)GPs. 

PROOF. We only prove the LGP case, the cases for FLGPs and (F)GPs are 
similar. 

For the "only if direction, take a non-free rule r p : a p <— f3 p , m(X) e P p and 
two variables X and Y in r p . We have that r : a <— (3 is a non-free rule in P by the 
construction of P p and X and Y are two variables in r, such that there is a 7 C /?+ 
with either a regular atom q(t) that contains X and Y or an equality atom X = Y 
in 7. In the former case, we have that p(t, 0, q) 6 7 P C (3 p + such that r p is loosely 
guarded. In the latter case, X = Y e j p such that again r p is loosely guarded. 

For the "if direction, take a non-free r:a<-/?6P and two variables X and 
Y in r. Then r p : a p <— [3 p , m(X) is non-free in P p and X and Y are variables in 
r p . Thus, there is a 7 P C (f3 p U in(X)) + = with an atom containing the two 
variables X and Y. Then 7 C /?+ with an atom in 7 containing X and F. □ 

For a fully (loosely) guarded p-program P, we can rewrite comp(P) as the equivalent 
^i(L)GF formulas gcomp(P). gcomp(P) is comp(P) with the following modifications. 

— Formula (9) is replaced by 

3XX = X, (15) 

such that it is guarded by X = X. 
— Formula (10) is removed if r : a <— (3 is free or otherwise replaced by 

VY./\ 7b ^ \J a y\J ^{f3 + \ lh )w\J (3- , (16) 

where jb is a body guard of r, thus we have logically rewritten the formula such 
that it is (loosely) guarded. If r is a free rule of the form q(t) V not q(t) <— we 
have MY ■ true => q(t) V ^q(t) which is always true and can thus be removed 
from comp(P). 
— Formula (11) is replaced by the formulas 

VY • r(Y) => /\ a~ A f\ -./T (17) 

and 

VY-/\ 7 fc^r(Y)v\//3- V\/-(«"W) (18) 

where 7^ is a head guard of a <— /?. We thus rewrite an equivalence as two 
implications where the first implication is guarded by r(Y) and the second one 
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is (loosely) guarded by the head guard of the rule - hence the need for a fully 
(loosely) guarded program, instead of just a (loosely) guarded one. 
— For every E(r) in (12), replace E(r) by 

E'(r) = /\X t = t t A3Z- (/\P+\p\W] Ar(Y))[i, e Y|X,] , (19) 

with Z = Y\{^i | ti G Y}, i.e., move all X, = ti where ti is constant out of 
the scope of the quantifier, and remove the others by substituting each ti in 
/\/3 + [p|VK] A r(Y) by Xi. This rewriting makes sure that every variable in the 
quantified part of E'(R) is guarded by r(Y)[tj e Y\Xi\. 

Example 4.11. For the fully guarded p-program P containing a rule 

p(X) V not p(X) <- p(X) 

with body and head guard {p(X)}, sat(P) = {VX • p(X) p(X) V ->p(X)}, 
gl(P) = {VX ■ r(X) <S> p(X)} and the formula (f>{W,Xi) in fpf(P) is = 
W(Jfi) V • X\ = X A W{X) A r(X). gcomp(P) translates sat(P) identically and 
rewrites the equivalence of gl(-P) as two implications resulting in guarded rules. 
The rewritten 4>{W,Xi) is W{X{) V {W{X{) A r(X 1 )). There is no quantification 
anymore in this formula since X was substituted by X\. Clearly, for a universe {x}, 
we have that the open answer set of the program is ({x}, 0), which corresponds with 
the unique model of gcomp(P) for a universe {x}. 

The translation gcomp(P) is logically equivalent to comp(P) and, moreover, it con- 
tains only formulas in (loosely) guarded fixed point logic. 

Theorem 4.12. Let P be a fully (loosely) guarded p-program. (U,M) is a model 
o//\comp(P) iff(U,M) is a model of f\ gcomp(P). 

Proof. This can be shown by using standard logical equivalences. □ 

Theorem 4.13. Let P be a fully (loosely) guarded p-program. Then, the formula 
/\gcomp(P) is a (i(L)GF formula. 

PROOF. We first show that [LFP WX.</>'(W, X)] (X) is a valid fixed point formula, 
with 0'(W,X) equal to <p(W, X) with E'(r) instead of E(r). We have that all free 
variables are still in X, since only Xi — ti where ti is constant is moved out of the 
scope of the quantifier in E(r) and all other ti where substituted by Xi such that Z 
in E(r) bounds all other variables than X. Furthermore, p appears only positively 
in 4>'. 

We next show that /\gcomp(P) is a /zLGF formula if P is fully loosely guarded; 
the treatment for /^GF formulas if P is fully guarded is similar. 

— Formula (15) is guarded with guard X = X. 

— Formula (16) corresponds with a non-free rule a <— (3 with a body guard 7^; thus 

vars(a <— [3) C vars(^b)- 

— free(V a V V ^(P + \lb) V V P~) C Y = vars(a <-/?) = vars(~/ b ) = free(/\7 6 ). 
— Take two variables Yi and Yj from Y, then Yj e wars (a <— j3) and e 
wars (a <— /?), such that and Y, are in an atom from -ft- 
— Formula (17) is guarded with guard r(Y). 
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— Formula (18): 

— For a non-free rule a <— [3 with a head guard 7^. Can be done similarly as 
formula (16). 

— If a <— (3 is free, i.e., of the form q(t) V not q(t) <— , we have that jh = {q(t)}, 
and formula (18) is of the form VY • q(t) r(Y). 
— free(r(Y)) = Y = vars(a <—/?) = uars(g(t)) = free(/\ 7^). 
— Take two variables Y^ and Y} from Y, then Yi G wars (a <— (3) and Y} G 
vars(a <— (3), such that Yi and Y} arc in vars(q(t)) — free(7/j). 

— For the last case, we need to show that </>'(X) is a /jLGF formula where W does not 
appear as a guard. We show that for each r : a <— (3, 3Z ■ (/\ f3 + [p\W] Ar(Y))[ij G 
Y|Xj] is a guarded formula with guard r(Y)[]. Thus W does not appear as a 
guard. 

-free((A/3+bl^] Ar(Y))[t ; G Y|JQ]) = Y\{^ | t 4 G Y} U {X t \ U G Y} = 
free(r(Y)[]). 

— Take a quantified variable Z e Y\{f, | t, e Y} and U from Y\{^ | G 
Y} U {X, I U G Y}, then Z and C7 appear in r(Y)[]. 

□ 

Since gcomp(P) is just a logical rewriting of comp(P) its size is linear in the size of 
comp(P). 

Theorem 4.14. Let P be a fully (loosely) guarded p-program. The size of the 
formula gcomp(P) is linear in the size o/comp(P). 

Proof. The size of formula (15) is linear in the size of (9). Formula (16) is just 
a shuffling of (10). Every formula (11) is replaced by two shuffled formulas. Finally, 
E'(r) is E(r) with the movement of some atoms and applying a substitution, thus 
the size of E'(r) is linear in the size of E(r). □ 

Theorem 4.15. Let P be a (L)GP and q an n-ary predicate in P. q is satisfiable 
w.r.t. P iff p(X, 0, q) A /\ gcomp((P f ) p ) is satisfiable. Moreover, this reduction is 
polynomial in the size of P. 

Proof. By Theorem 4.7 and 4.10, we have that (P f ) p is a fully (loosely) guarded 
p-program, thus the formula /\ gcomp((P f ) ) is defined. By Theorem 4.8, we have 
that q is satisfiable w.r.t. P iff q is satisfiable w.r.t. P f . By Theorem 3.13, we 
have that q is satisfiable w.r.t. P f iff p(X, 0, g) A comp((P f ) p ) is satisfiable. Finally, 
Theorem 4.12 yields that q is satisfiable w.r.t. P iff p(X, 0, q) A /\ gcomp((P f ) p ) is 
satisfiable. 

Theorem 4.9, Theorem 3.13, and Theorem 4.14 yield that this reduction is poly- 
nomial. □ 

For a (L)GP P, we have, by Theorem 4.13, that A gcomp((P f ) ) is a p,(L)GF 
formula such that the formula p(X, 0, q) A /\ gcomp((P') p ) is as well. Since satisfi- 
ability checking for /i(L)GF is 2-EXPTiME-complete (Theorem [1.1] in [Gradel and 
Walukiewicz 1999]), satisfiability checking w.r.t. P is in 2-exptime. 

Theorem 4.16. Satisfiability checking w.r.t. (L)GPs is in 2-exptime. 
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An answer set of a program P (in contrast with an open answer set) is defined as 
an answer set of the grounding of P with its constants, i.e., M is an answer set of 
P if it is a minimal model of P^ s ^ P y As is common in literature, we assume P 
contains at least one constant. 

We can make any program loosely guarded and reduce the answer set semantics 
for programs to the open answer set semantics for loosely guarded programs. For 
a program P, let P s be the program P, such that for each rule r in P and for each 
pair of variables X and Y in r, g(X, Y) is added to the body of r. Furthermore, add 
g(a,b) <— for every a, b <G cts(P). Note that we assume, without loss of generality, 
that P does not contain a predicate g. 

Example 4.17. Take a program P 

q(X) - f(X, Y) 
f(a, Y)Vnotf(a, Y) <- 

such that cts(P) = {a}, and P has answer sets {f(a,a),q(a)} and 0. The loosely 
guarded program P s is 

q(X) <- g(X,X),g(Y,Y),g(X,Y),f(X,Y) 
f(a, Y)Vnotf(a, Y) «- F) 
g(a, a) <- 

For a universe J7, we have the open answer sets (17, {/(a, a), <f(a), <?(a, a)} and 
(U,{g(a,a)}). 

The newly added guards in the bodies of rules together with the definition of those 
guards for constants only ensure a correspondence between (normal) answer sets 
and open answer sets where the universe of the latter equals the constants in the 
program. 

Theorem 4.18. Let P be a program. M is an answer set of P iff (cts(P), M U 
{g(a,b) | a, b e cts(P)}) is an open answer set of P s . 

Note that one can use Theorem 4.18 as a definition of answer set of programs 
with generalized literals, in case one is only interested in answer sets and not in the 
open answer sets. 

Theorem 4.19. Let P be a program. The size o/P s is quadratic in the size of 

P. 

Proof. If there are c constants in P, we add c 2 rules g(a, b) <— to P s . Fur- 
thermore, the size of each rule grows also grows quadratically, since for a rule with 
n variables we add n 2 atoms g(X,Y) to the body of r. □ 

By construction, P s is loosely guarded. 

Theorem 4.20. Let P be a program. P g is a LGP. 

We can reduce checking whether there exists an answer set containing a literal 
to satisfiability checking w.r.t. the open answer set semantics for loosely guarded 
programs. 
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THEOREM 4.21. Let P be a program and q an n-ary predicate in P. There is 
an answer set M of P with q(a) G M iff q is satisfiable w.r.t. P s . Moreover, this 
reduction is quadratic. 

Theorem 4.22. Satisfiability checking w.r.t. LGPs is NEXPTlME-ZiareJ. 

Proof. By [Dantsin et al. 2001; Baral 2003] and the disjunction-freeness of the 
GL-reduct of the programs we consider, we have that checking whether there exists 
an answer set M of P containing a q(a) is NEXPTiME-complete. Thus, by Theorem 
4.21, satisfiability checking w.r.t. a LGP is NEXPTiME-hard. □ 

A similar approach to show NEXPTiME-hardncss of GPs instead of LGPs does 
not seem to be directly applicable. E.g., a naive approach is to add to the body of 
every rule r in a program P, an n-ary guarding atom g(X\, . . . , Xk, ■ ■ ■ Xk), k < n, 
with n the maximum number of different variables in rules of P and X\ , . . . , Xk 
the pairwise different variables in r. Furthermore, one need to enforce that for 
an open answer set and n constants oi, . . . , a n , g(ai, . . . , a n ) is in the answer set, 
and vice versa, if g(xi, . . . , x n ) is in the open answer set then x\, . . . , x n <G cts(P). 
This amounts to adding c" rules g(ai , . . . , a n ) <— for constants oi, . . . , a n G cts(P) 
where c is the number of constants in P. Since n is not bounded, this transformation 
is, however, not polynomial. 

In Section 8, we improve 20 on Theorem 4.22 and show that both satisfiability 
checking w.r.t. GPs and w.r.t. LGPs is 2-EXPTiME-hard. 

5. OPEN ANSWER SET PROGRAMMING WITH GENERALIZED LITERALS 

In this section, we extend the language of logic programs with generalized literals 
and modify the open answer set semantics to accommodate for those generalized 
literals. As already argued in the introduction, generalized literals allow for a more 
robust representation of knowledge than is possible without them. 

E.g., in [Balduccini and Gclfond 2003] a mapping is given from an action de- 
scription into an answer set program. In this mapping, a predicate precJi{D,T) 
needs to be computed, intuitively meaning that all preconditions of D hold at time 
T. As the authors did not have generalized literals at their disposal, they needed a 
ternary relation pred(D, N, C) which encodes that C is the A-th precondition of D 
and a special predicate denoting the number of preconditions for D, i.e. an explicit 
linear order among the preconditions has to be established. Next, using this linear 
order, they had to introduce some additional ternary predicate allJi that checks if 
all preconditions hold and than use this predicate to compute precJi{D, T). How- 
ever, with generalized literals no linear order needs to be established to compute 
prec-h(D,T), i.e. it suffices to have predicates prec(D,C) encoding that D is a 
precondition of C. Than, we can use, with h(C, T) meaning that condition C holds 
at time T, the rule 

prec_h(D, T) «- [VC • prec(D, C) => h(C, T)} 

to compute the correct meaning of precJi. 



20 Note that pCnpC exptime C nexptime C 2-exptime C . . . where p C exptime, exptime C 
2-exptime, . . ., and np C nexptime, nexptime C 2-nexptime, . . ., see, e.g., [Papadimitriou 1994; 
Tobies 2001]. 
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Formally, a generalized literal is a first-order formula of the form 



VY • 4> ip , 

where is a finite boolean combination of atoms (i.e., using ->, V, and A) and ip is 
an atom; we call </> the antecedent and ip the consequent. We refer to literals (i.e., 
atoms and naf-atoms since we assume the absence of ->) and generalized literals 
as g-literals. For a set of g-literals a, a x = {I \ I generalized literal in a}, the 
set of generalized literals in a. We extend a + and a~ for g-literals as follows: 
a + = (a\a x ) + and a~ = (a\a x )~ ; thus a = a + U not a~ Ua x . 

A generalized program (gP) is a countable set of rules a <— (3, where a is a finite 
set of literals, |a + | < 1, (5 is a countable 21 set of g-literals, and Vt, s-t = s £ a + , i.e., 
a contains at most one positive atom, and this atom cannot be an equality atom. 
Furthermore, generalized literals are ground if they do not contain free variables, 
and rules and gPs are ground if all g-literals in it are ground. 

For a g-literal Z, we define vars(l) as the (free) variables in I. For a rule r, we 
define vars(r) = (J{vars(l) | I g-literal in r}. For a set of atoms I, we extend the 
\= relation for interpretations I, by induction, for any boolean formula of ground 
atoms. For such ground boolean formulas (p and ip, we have 

(1) / h cpAip iff / h <t> and / |= V, 

(2) / |= <j) V tp iff / |= <p or / (= V, and 

(3) / |= -.0 iff / ^ <j>. 

Similarly as for programs without generalized literals, call a pair (U, I) where U is 
a universe for P and / a subset of Bp an open interpretation of P. For a ground gP 
P and an open interpretation (U, I) of P, we define the GeLi-reduct pxC 7 ' 7 ) which 
removes the generalized literals from the program: P x ^ U ' r ~> contains the rules 

a-/3\/3 x ,(/3 x ) x(C/ ' 7) , (20) 

for a <— in P, where 

{nx (u,i) = (J {my] | y c [7,7 ^ d>[Y\y}} . 

Intuitively, a generalized literal VY • <f> =>• ^ is replaced by those ^[Y|y] for which 
0[Y|y] is true, such that 22 , e.g., p{a) <— [VX • q(X) r(X)] means that in order 
to deduce p(a) one needs to deduce r(x) for all x where q(x) holds. If only q{x\) 
and q{x2) hold, then the GeLi-reduct contains p(a) <— r{xi ), r(x2)- With an in- 
finite universe and a condition <f> that holds for an infinite number of elements in 
the universe, one can thus have a rule with an infinite body in the GeLi-reduct. 
Note that ((/3 x ) x ^ c/,/ ^) is always empty by definition of generalized literals: the 
consequent is always an atom. 

Also note that VY ■ <f> => ip cannot be seen as VY • -k/> V tp, where the forall is an 
abbreviation of the conjunction with respect to a given domain and where we use 



21 Thus the rules may have an infinite body. 

22 We put square brackets around generalized literals for clarity. 
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an extended reduction for nested programs [Lifschitz et al. 1999]. Consider e.g. the 
rules 

p(X) «- \VY--ib(Y) A^c(Y) d(Y)} 
6(0) - 

and consider the open interpretation I = ({a}, {b(a)}). The GeLi reduct of P 
w.r.t. J is (note that / \= -16(a) A _| c(a)) 

p(a) <— d(a) 
6(a) - 

which will have / as an open answer set according to Definition 5.1 below. However, 
if we apply the suggested transformation to P, we get 

P (x) «- [vf • b{Y) v c (y) v d(y)] 

6(a) - 

which would have the following "GL reduct for nested programs" wrt /: 

p(a) <- 6(a) V c(o) V d(a) 
6(a) - 

But, since / |= 6(a), the first rule becomes applicable and thus any answer set 
containing 6(a) must also contain p(a). Hence I is not an answer set using this 
transformation. 

Definition 5.1. An open answer set of P is an open interpretation (U,M) of P 
where M is an answer set of (Pu) x ^ U ' M K 

In the following, a gP is assumed to be a finite set of finite rules; infinite gPs only 
appear as byproducts of grounding a finite program with an infinite universe, or, by 
taking the GeLi-reduct w.r.t. an infinite universe. Satisfiability checking remains 
defined as before. 

Example 5.2. Take a gP P 

p(X) <- [\/Y-q(Y)^r(Y)} 
r(X) +- q(X) 
q(X) V not q(X) <- 

Intuitively, the first rule says that p(X) holds if for every Y where q(Y) holds, 
r(y) holds (thus p(X) also holds if q(Y) does not hold for any Y). Take an open 
interpretation ({x,y},{p(x),r(x),q(x),p(y)}). Then, the GeLi-reduct of P{ x , y } is 

p(x) <— r(x) 
p(y) <- r{x) 
r(x) *— q{x) 

r{y) <- q(y) 
q(x) V not q{x) <— 
q(y) V not q(y) <- 

{p(x), r(x), g(x),p(y)} is an answer set such that the open interpretation is an open 
answer set. 
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Example 5.3. Take the following program P, i.e., the open answer set vari- 
ant of the classical infinity axiom in guarded fixed point logic from [Gradel and 
Walukiewicz 1999] (see also Example 2.3, pp. 10), where we use well to denote 
well-founded: 

n ■ q(X) <- f(X, Y) 

r 2 : <- f(X,Y),not q(Y) 

r 3 : <- f(X,Y),not well{Y) 

r 4 : well(Y) <- q(Y), [VX -f(X, Y) => well(X)} 

r 5 : /(X, Y) V not f(X, Y) «- 

Intuitively, in order to satisfy q with some x, one needs to apply n, which enforces 
an /-successor y. Moreover, the second rule ensures that also for this y an /- 
successor must exist, etc. The third rule makes sure that every /-successor is on a 
well-founded /-chain. The well-foundedness itself is defined by r 4 which says that 
y is on a well-founded chain of elements where q holds if all /-predecessors of y 
satisfy the same property. 

E.g., take an infinite open interpretation (U,M) with U = {xo, Xi, . . .} and 
M = {q(xo),well(xo),f(xo,xi),q(xi),well(xi),f(xi,X2),---})- Pu contains the 
following grounding of r^: 

r°: well{x ) <- q(x ), [VX • f(X, x ) well{X)\ 
rj : well{xi) <- q\ Xl ), [VX • f(X, Xl ) well(X)] 



Since, for r°, there is no /(y,xo) in M, the body of the corresponding rule in the 
GeLi-reduct w.r.t. (U, M) contains only q(xo). For r\, we have that f(xo, x\) G M 
such that we include well(xo) in the body: 

well(xg) <— q{xo) 
well(x2) <— q{x 1 ),well{xo) 



One can check that (U, M) is indeed an open answer set of the gP, satisfying q. 

Moreover, no finite open answer set can satisfy q. First, note that an open answer 
set (U,M) of P cannot contain loops, i.e., {f(xo,x\),...,f(x n ,Xo)} C M is not 
possible. Assume otherwise. By rule r^, we need well(xo) £ M. However, the 
GeLi-reduct of Pu contains rules: 

well(xo) <— q(xo), well(x n ), . . . 
well(x n ) <— q(x n ),well(x n - 1 ), . . . 

well(xj) <— q(xi),well(xo), ■ ■ ■ 

such that well(xo) cannot be in any open answer set: we have a circular dependency 
and cannot use these rules to motivate well(x ), i.e., well(xo) is unfounded. Thus, 
an open answer set of P cannot contain loops. 

Assume that q is satisfied in an open answer set (U, M) with q(x n ) e M. Then, 
by rule ri, we need some X such that f(xo, X) 6 M. Since M cannot contain loops 
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X must be different from Xq and we need some new x\. By rule r2, q(x\) G M, 
such that by rule n, we again need an X such that f(x\,X). Using Xo or xi for 
X results in a loop, such that we need a new Xi- This process continues infinitely, 
such that there are only infinite open answer sets that make q satisfiable w.r.t. P. 

We defined the open answer set semantics for gPs in function of the answer set 
semantics for programs without generalized literals. We can, however, also define a 
GL-reduct P M directly for a ground gP P by treating generalized literals as positive, 
such that a+ <- /?+, /3 X G P M iff a <- (3 G P and M |= a" and M |= not /3~ for 
a ground gP P. Applying the GL-reduct transformation after the GeLi-reduct 
transformation (like we defined it), is then equivalent to first applying the GL- 
rcduct transformation to a gP and subsequently computing the GcLi-reduct. 

Example 5.4. Take a program FU{r} with F = {q(x) *—,b(x) <—,b(y) *—,c(x) <— 
} and r : a{X) <— [VX • ^q{X) => &(X)],noi c(X). For a universe U = {x,y}, 
(FD{r})u is Fu{r x , r y } where 

r,, : o(a;) [VX • -.g(A") ^ nof c(a;) 

and 

r y : o(y) ^ [VX • ^q(X) => b{X)],not c(y) 
Applying the GeLi-reduct transformation w.r.t. 

(U,M = {q(x),b(x),b(y),c(x),a(y)}) 

yields 

(F U {r x , rJ) x ^' M ) = F U {a(x) ^ not c(x); a(y) <- b(y), not c(y)} . 

The GL-reduct of the latter is F U {a(y) <— b(y)}, such that (U,M) is a (unique) 
open answer set of F U {r} for U = {x, y}. 

First applying the GL-reduct transformation to FU{r x ,r y } yields FL){r y }, and, 
subsequently, the GeLi-reduct again gives F U {a(y) <— b(y)}. Thus 

((fU{ ri ,r s })«) M = ((FU{ ri ,r 9 }) M )« . 

Since the GeLi-reduct transformation never removes rules or naf-atoms from rules, 
while the GL-reduct transformation may remove rules (and thus generalized liter- 
als), calculating the GL-reduct before the GeLi-reduct is likely to be more efficient 
in practice. We opted, however, for the "GeLi-reduct before GL-reduct" transfor- 
mation as the standard definition, as it is theoretically more robust against changes 
in the definition of generalized literals. E.g., if naf were allowed in the consequent 
of generalized literals, the "GL-reduct before GeLi-reduct" approach does not work 
since the GeLi-reduct (as currently defined) could introduce naf again in the pro- 
gram, making another application of the GL-reduct transformation necessary. 

Theorem 5.5. Let P be a ground gP with an open interpretation (U, M). Then, 

(px(U,M)\M _ (pM\x(U,M) 



We have a similar result as in Theorem 2.2 regarding the finite motivation of 
literals in possibly infinite open answer sets. We again express the motivation 
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of a literal more formally by means of the immediate consequence operator [van 
Emden and Kowalski 1976] T that computes the closure of a set of literals w.r.t. a 
GL-reduct of a GeLi-reduct. 

For a gP P and an open interpretation (U, M) of P, T p U ' M ^ : Bp — + Bp is 



defined as T(B) = B U {a\a <- /3 e ( P* (C/ ' M) ) A -B |= /?}. Additionally, we have 



T°(B) = B 23 , and T n+1 (B) = T(T n {B)). 

Theorem 5.6. Let P be a gP and (U,M) an open answer set of P. Then, 
Va G M ■ 3n< oo ■ a e T™. 

Finally, the next example illustrates that their is a difference between our answer 
set semantics for generalized literals and the answer set semantics introduced in 
[Lifschitz et al. 2001b; Osorio et al. 2004; Osorio and Ortiz 2004] for propositional 
theories, which is based on intuistionistic logic. 

Example 5.7. Consider the program 

a(X) <- [VX • c(X) => b(X)] 
a(X) <- b(X) 
b(X) - c(X) 
c(X) <- a(X) 

and consider the open interpretation 7 = ({a}, {a(a), 6(a), c(a)}). Applying the 
GeLi-reduct on this program w.r.t. 7 yields the program 

a(a) <— 6(a) 
a(a) <— 6(a) 
6(a) <— c(a) 
c(a) <— a(a) 

which only has as an answer set, implying that 7 is not an open answer set for 
this program. 

However, one could expect the programs 

a(a) <- [VX • c{a) => 6(a)] 

a(a) <— 6(a) 

6(a) <— c(a) 

c(a) <— a(a) 



and 



a(a) < 


— c(a 


a(a) < 


- K« 


6(a) ♦ 




c(a) « 


- a ( a 



6(a) 



to be equivalent, but, in the context of [Lifschitz et al. 2001b; Osorio et al. 2004; 
Osorio and Ortiz 2004], we have {a(a),b(a), c(a)} as the unique answer set for the 
last program, as c(a) => 6(a) is true because of the third rule in that program. 



23 We omit the sub- and superscripts (U, M) and P from 7^ ) f/ ' M ) if they are clear from the context 
and, furthermore, we will usually write T instead of T(0). 
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Thus, this example illustrates that there is a difference between our semantics and 
the one in [Lifschitz et al. 2001b; Osorio et al. 2004; Osorio and Ortiz 2004]. 

In [Leone and Perri 2003] , so-called parametric connectives are introduced in the 
context of disjunctive logic programs. The semantics of parametric connectives, e.g, 
/\{p(X) : a(X,Y),b(X)}, is essentially the same as the semantics of generalized 
literals VX • a(X, Y) A b(X) => p(X). Note that [Leone and Perri 2003] also allows 
for a disjunction in the body (indicated by a V instead of /\), however, since we 
allow for arbitrary boolean formulas in the antecedent of our generalized literals, 
the latter are more flexible. 

6. OPEN ANSWER SET PROGRAMMING WITH GPS VIA FIXED POINT LOGIC 

We reduce satisfiability checking w.r.t. gPs to satisfiability checking of FPL for- 
mulas. Note that the exposition in this section is along the lines of Section 3, such 
that we will skip the details of some of the proofs. 

First, we rewrite an arbitrary gP as a gP containing only one designated predicate 
p and (in)equality. A gP P is a p-gP if p is the only predicate in P different from 
the (in)equality predicate. For a set of g-literals a, we construct a p in two stages: 

(1) replace every regular m-ary atom q(t) appearing in a (either in atoms, naf- 
atoms, or generalized literals) by p(t, 0, q) where p has arity n, with n the 
maximum of the arities of predicates in P augmented by 1 , a sequence of new 
constants of length n — m — 1 , and q a new constant with the same name as 
the original predicate, 

(2) in the set thus obtained, replace every generalized literal VY ■ <j> i/j by VY • 
4> A /\in(Y) ip, where Y ^ t in in(Y) stands for -i(Y = t) (we defined 
generalized literals in function of boolean formulas of atoms) . 

The p-gP P p is then the program P with all non-free rules r : a <— (3 replaced by 
r p : a p <— [3 P , m(X) where vars(r) = X. Note that P and P p have the same free 
rules. 

Example 6.1. Let P be the gP: 

q(X) <- [VY ■ r(Y) s(X)} 
r(o) <- 
s(X) V not s(X) <- 

Then q is satisfiable by an open answer set ({a,x},{s(x),r(a),q(x)}). The p-gP 
P P is 

p(X,q) <- [VY-p(Y,r)Ahin(Y)^p(X,s)},in(X) 
p(a,r) <- 
p(X,s) V not p{X,s) <- 

where in(X) = {X ^ s, X ^ q, X ^ r, X ^ 0}. The corresponding open answer 
set for this program is ({a, x, s, r, q}, {p(x, s),p(a, r),p(x, <?)}). 

Theorem 6.2. Let P be a gP, p a predicate not in P, and q a predicate in P. q 
is satisfiable w.r.t. P iff there is an open answer set (U',M') of the p-gP P p with 
p(x, 0,q) £ M 1 . Furthermore, the size of P p is polynomial in the size of P. 
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Proof. The proof is analogous to the proof of Theorem 3.3. □ 

The completion compgl(P) of a gP P consists of formulas that demand that different 
constants in P are interpreted as different elements: 

a ^ b . (21) 

For every pair of different constants a and b in P, compgl(P) contains formulas 
ensuring the existence of at least one element in the domain of an interpretation: 

-true . (22) 

Besides these technical requirements matching FOL interpretations with open in- 
terpretations, compgl(P) contains the formulas in f ix(P) = sat(P) U gl(P) U 
gli(P) U fpf (P), which can be intuitively categorized as follows: 

— sat(P) ensures that a model of f ix(P) satisfies all rules in P, 

— gl(P) is an auxiliary component defining atoms that indicate when a rule in P 
belongs to the GL-reduct, 

— gli(P) indicates when the antecedents of generalized literals are true, and 

— f pf (P) ensures that every model of f ix(P) is a minimal model of the GL-reduct 
of the GeLi-reduct of P; it uses the atoms defined in gl(P) to select, for the 
calculation of the fixed point, only those rules in P that are in the GL-reduct of 
the GeLi-reduct of P; the atoms defined in gli(P) ensure that the generalized 
literals are interpreted correctly. 

In the following, we assume that the arity of p, the only predicate in a p-gP is n. 

Definition 6.3. Let P be a p-gP. The fixed point translation of P is 
f ix(P) = sat(P) U gli(P) U gl(P) U f pf (P), where 

(1) sat(P) contains formulas 

VY-/\/3^\/ a ( 23 ) 
for rules r:a^/36P with vars(r) = Y, 

(2) gl(P) contains the formulas 

VY • r(Y) <^> /\ oT A /\ -./T (24) 

for rules r : a <— (3 e P with vars(r) = Y, 

(3) gli(P) contains the formulas 

VZ • g(Z) ^ (f> (25) 

for generalized literals g : VY • <fr => ip £ P 24 where (j> contains the variables Z, 

(4) fpf (P) contains the formula 

VX • p(X) =>• [LFP WX..(j>( W, X)](X) (26) 



We assume that generalized literals are named. 
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with 



<j)(W,X.) = W(X)V \J E(r) (27) 

r:p(t)Va^f3eP 

and 

E{r) = 3Y • X 1 = h A . . . M„ = t n A f\f3 + [p \ W] A /\ 7 A r(Y) (28) 

where X = Xi, . . . , X n are n new variables, vars(r) = Y, W is a new (second- 
order) variable, | VF] is (3 + with p replaced by W, and 7 is /3 X with 
— every generalized literal g : VY ■ <f> => i\> replaced by VY • g(Z) ip, Z the 

variables of 0, and, subsequently, 
— every p replaced by W. 

The completion of P is compgl(P) = f ix(P) U {(21), (22)}. 

The predicate appears only positively in ^(W, X) such that the fixed point 
formula in (26) is well-defined. Note that the predicate p is replaced by the fixed 
point variable W in E(r) except in the antecedents of generalized literals, which 
were replaced by atoms g(Z), and the negative part of r, which were replaced by 
atoms r(Y), thus respectively encoding the GeLi-reduct and the GL-reduct. 25 

By the first disjunct in (27), we have that applying ^ U ' M "> to a set S C U n does 
not lose information from S. 

Theorem 6.4. Let P be ap-gP and (U, M) an open interpretation with S C U n . 
Then 

S C ^ U ' M \S) . 
Proof. Similar to the proof of Theorem 3.6. □ 

Example 6.5. We rewrite the program from Example 5.3 as the p-gP P: 

n ■■ p(X,0,g) «- p(X,Y,f),in(X),in(Y) 

r 2 : «- p(X, Y,f),notp(Y,0,q),in(X),in(Y) 

rs : <- p(X, Y,f),not p{Y, 0,well),in(X),in(Y) 

U ■ p(Y,0,well) «- p(F,0,g),m(F), 

[VX • p(X, V, /) A A in(X) => p(X, 0, we«)] 

r« : p(X, Y,f)Wnotp(X, Y,f) «- 

where in(X) and in(Y) are shorthand for the inequalities with the new constants. 
sat(P) consists of the sentences 

-VX, Y ■ p(X, Y, f) A A in{X) A A m{Y) => p(X, 0, q), 

— VX, y • p(X, Y, /) A -nf>(Y, 0, g) A A «n(X) A A «n(Y) => false, 

— VX, y • p(X, Y, f) A -,p(Y, 0, we//) A A «n(X) A A => false, 

— VF • p(y, 0, g) A A in{Y) A (VX • p(X, Y, f) A A in{X) p{X, 0, well)) 

=> p(Y, 0, well), and 
-VX, y • true => p(X, Y, f) V ^p(X, Y, /). 



25 Note that we apply the GeLi-reduct and the GL-reduct "at the same time", while the open 
answer set semantics is denned such that first the GeLi-reduct is constructed and then the GL- 
reduct. However, as indicated by Theorem 5.5, the order of applying the rcducts docs not matter. 
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gl(-P) contains the sentences 

— VX,Y-n(X, Y) <=> f\in{X) A /\in(Y), 

-VX, Y ■ r 2 (X, Y) -.p( y , 0,q) A /\ in(X) A A m( K), 

— vx, y • r 3 (x, y) ^ -. P ( y , o, we/o a A OT PO a A *«( 

— Vy • r^(y) & A»(^), and 

-vx,y-r 5 (x, y)^ P (x, y,f). 

gli(P) contains the sentence VX,Y-g(X, Y) <=>>p(X, Y,f) A f\in(X), and fpf(P) 
is constructed with 

—E(n) = 3X, Y ■ X 1 = X A X 2 = A X 3 = q A W(X, Y, f) A n(X, Y), 

—E{r 4 ) = 3Y ■ X x = Y A X 2 = A X 3 = well A W{Y, 0, q)A 
(VX • g(X, Y) W(X, 0, well)) A r A {Y), and 

-E(r 5 ) = 3X,Y ■ X! = X A X 2 = Y A X 3 = f A r 5 (X, K). 

Take an infinite FOL interpretation (U, M) with U = {q, f, well, 0, Xo, Xi, . . .} and 26 

M = {p(x ,0,q),p(x o , 0, well),p{xQ,x u f), 

p(xi, 0, g),p(xi , 0, well),p(x 1 ,x 2 , /),... 
ri(xo,x ),ri(x ,xi), . . .,ri(xi,x ), . . . , r 4 (x ), r 4 (xi), . . . 

r 5 (xo,xi),r 5 (xi,X2), . . . ,3(x ,xi),5(xi,x 2 ), •••})• 

sat(P), gl(-P), and gli(P) arc satisfied. We check that fpf(P) is satisfied by M. 
We construct the fixed point of <^ M ) where <f>(W, X U X 2 , X 3 ) = W(X 1 ,X 2 ,X 3 ) V 
E(n) V E{n) V E(R 5 ) as in [Gradel 2002a], i.e., in stages starting from W° = 0. 
We have that 

_ w i = ^,M) (vt/0) = {( XQtXl j) t ( XltX2t /),...}, where the (x,,x m ,/) are in- 
troduced by E(r 5 ), 

-W 2 = (pW^iW 1 ) = W 1 U{(x ,0,q),(x 1 ,0,q),...}, where the (x,,0,g) arc in- 
troduced by E(n), 

-W 3 = <j)^ M \W 2 ) = W 2 U {(x ,0, well)}, where (x ,0, well) is introduced by 
£(r 4 ), 

-W 4 = <j>V> M \W 3 ) = W 3 U {(an, 0, we//)}, 

The least fixed point LFP^^^) is then U a<00 W a [Gradel 2002a]. The sentence 
fpf (P) is then satisfied since every p-literal in M is also in this least fixed point. 
(U, M) is thus a model of compgl(P), and it corresponds to an open answer set of 
P. 

Theorem 6.6. Let P be a p-gP. Then, (U,M) is an open answer set of P iff 
(U, M U R U G) is a model of A compgl(P), where 

R = {r(y) | r[Y\ y] : a[] «- f3[] E P v , M \= a\\~ U not /3[]", vars(r) = Y} , 



We interpret the constants in compgl(P) by universe elements of the same name. 
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i.e., the atoms corresponding to rules for which the GeLi-reduct version will be in 
the GL-reduct, and 

G = {g(z) | g : VY- <f> i> G P,»ora(0) = Z,M |= 0[Z | z]} , 

i.e., the atoms corresponding to true antecedents of generalized literals in P. 

Proof. Similar to the proof of Theorem 3.8. □ 

Using Theorems 6.2 and 6.6, we can reduce satisfiability checking w.r.t. gPs to 
satisfiability checking in FPL. Moreover, since /\ compgl(P) contains only one fixed 
point predicate, the translation falls in the alternation-free fragment of FPL. 

Theorem 6.7. Let P be a gP, p a predicate not appearing in P, and q an n- 
ary predicate in P. q is satisfiable w.r.t. P iff 3X ■ p(X, 0, q) A /\ compgl(P p ) is 
satisfiable. Moreover, this reduction is polynomial. 

PROOF. Assume q is satisfiable w.r.t. P. By Theorem 6.2, we have that p(x, 0, q) 
is in an open answer set of P p , such that with Theorem 6.6, p(x, 0, q) is in a model 
of /\compgl(P p ). 

For the opposite direction, assume 3X • p(X, 0, q) A /\ compgl(P p ) is satisfiable. 
Then there is a model (U, M 1 ) of f\ compgl(P) with p(x, 0, q) e M'. We have that 
M' = M U R U G as in Theorem 6.6, such that (U, M) is an open answer set of 
P p and p(x, 0, q) G M. From Theorem 6.2, we then have an open answer set of P 
satisfying q. 

The size of f\ compgl(P p ) is polynomial in the size of P p . Since the size of the 
latter is also polynomial in the size of P, the size of /\ compgl(P p ) is polynomial in 
the size of P. □ 

7. OPEN ANSWER SET PROGRAMMING WITH GUARDED GENERALIZED PRO- 
GRAMS 

As we did in Section 4 for programs, we introduce in this section a notion of 
guardedness such that the FPL translation of guarded gPs falls in [iG¥. We do 
not, however, consider their loosely guarded counterpart like we did in Section 4, 
but leave this as an exercise to the reader. 

Definition 7.1. A generalized literal VY • <p =>■ ip is guarded if <f> is of the form 
7 A 4>' with 7 an atom, and vars(Y) U vars(tfi') U vars(ip) C vars("f); we call 7 the 
guard of the generalized literal. A rule r : a <— f3 is guarded if every generalized 
literal in r is guarded, and there is an atom 7/, G f3 + such that vars(r) C vars^b)', 
we call 76 a body guard of r. It is fully guarded if it is guarded and there is a 
lh Q ct~ such that vars{r) C vars^h)', lh is called a head guard of r. 

A gP P is a (fully) guarded gP ((F) GgP) if every non-free rule in P is (fully) 
guarded. 

Example 7.2. Reconsider the gP from Example 5.3. ri,T2, and r^ are guarded 
with guard f(X,Y). The generalized literal in r^ is guarded by f(X, Y), and r± 
itself is guarded by q(Y). Note that r 5 does not influence the guardedness as it is 
a free rule. 

Every fully guarded gP is guarded. Vice versa, we can transform every guarded gP 
into an equivalent fully guarded one. For a GgP P, P f is defined as in Section 4 
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(pp. 35), i.e., as P with the rules a <— [3 replaced by a U not [3 + <— [3 for the body 
guard 7b of a <— (3. For a GgP P, we have that P f is a FGgP, where the head 
guard of each non-free rule is equal to the body guard. Moreover, the size of P f is 
linear in the size of P. 

Theorem 7.3. Let P be a GgP. An open interpretation (17, M) of P is an open 
answer set of P iff (U, M) is an open answer set of P f . 

PROOF. The proof is analogous to the proof of Theorem 4.8 (pp. 21). □ 

We have that the construction of a p-gP retains the guardedness properties. 

Theorem 7.4. Let P be a gP. Then, P is a (F)GgP iff P p is a (F)GgP. 

Proof. The proof is analogous to the proof of Theorem 4.10 (pp. 21). □ 

For a fully guarded p-gV P, we can rewrite compgl(P) as the equivalent /zGF 
formulas gcompgl(P). For a guarded generalized literal £ = VY • (f> =>■ ip, define 

£ ff = VY • 7 => t/j V -0' , 

where, since the generalized literal is guarded, <f> = 7 A <j>', and vars(Y) U vars(4>') U 
vars(tp) C wars (7), making formula £ s a guarded formula. The extension of this 
operator - 9 for sets (or boolean formulas) of generalized literals is as usual. 
gcompgl(P) is compgl(P) with the following modifications. 

— Formula 3X ■ true is replaced by 

3X ■ X = X , (29) 

such that it is guarded by X = X. 
— Formula (23) is removed if r : a ^~ [3 is free or otherwise replaced by 

VY • 7h =>• V « V \/ \ {lb}) V V P~ V V ^ X ) 9 > ( 3 °) 

where 75 is a body guard of r, thus we have logically rewritten the formula such 
that it is guarded. If r is a free rule of the form q(t) V not q(t) <— we have 
VT • true => g(t) V ~>q(t) which is always true and can thus be removed from 
compgl(P). 
— Formula (24) is replaced by the formulas 

VY- r(Y) => /\oT A/\-./T (31) 

and 

VY • 7 /> r(Y) V \/ r V V - , («"\{7fc}) , (32) 

where 7^ is a head guard of a <— /3. We thus rewrite an equivalence as two 
implications where the first implication is guarded by r(Y) and the second one 
is guarded by the head guard of the rule. 
— Formula (25) is replaced by the formulas 

VZ • g(Z) => (f> (33) 

and 

VZ • 7 =s> g(Z) V -.0' (34) 
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where <f> = 7 A ip by the guardedness of the generalized literal VY ■</>=>■ ip. We 
thus rewrite an equivalence as two implications where the first one is guarded 
by g(Z) (vars((p) = Z by definition of g), and the second one is guarded by 7 
(vars(g(Z) V ->4>') = vars(Z) = vars(~f)). 
— For every E(r) in (26), replace E(r) by 

E'(r) = f\ X t = t t A 3Z ■ (f\ f3+[p\W] A f\j A r(Y))[U G Y\Xi] , (35) 

with Z = Y\{U \ U £ Y}, i.e., move all = ^ where is constant out 
of the scope of the quantifier, and remove the others by substituting each tj 
in /\(3 + [p\W] A /\-f A r(Y) by JQ. This rewriting makes sure that every (free) 
variable in the quantified part of E'(R) is guarded by r(Y)[tj G Y|J*Q]. 

Example 7.5. The rule 

r : p(X) V noi p(X) <- p(X), [VY ■ p(Y) A p(6) => p(a)] 

constitutes a fully guarded p-gP P. The generalized literal is guarded by p(Y) and 
the rule by head and body guard p(X). sat(P) contains the formula VX ■ p(X) A 
(VY ■ p(Y) A p(b) => p(a)) => p(X) V ~^p(X), gl(P) consists of VX • r(X) <^> p(X), 
gli(P) is the formula VY • g( Y) ^ p(Y) A p(b) and E(r) = 3X ■ X 1 = X A W(X) A 
(VY ■g(Y)^W(a))Ar(X). 
gcompgl(P) consists then of the corresponding guarded formulas: 

— VX ■ p(X) p(X) V -np(X) V -n(VY • p(Y) p(a) V -p(6)), 

-VX-r(X) =>p(X), 

~VX -p(X)^r(X), 

-VY-g(Y)^p(Y)Ap(b), 

— VF ■ p(F) g{ Y) V -np(6), and 

—E'(r) = W{X{) A (VY ■ g(Y) => W(a)) A r(X 1 ). 

As gcompgl(P) is basically a linear logical rewriting of compgl(P), they are equiv- 
alent. Moreover, /\ gcompgl(P) is an alternation-free /xGF formula. 

Theorem 7.6. Let P be a fully guarded p-gP. (U,M) is a model of 
/\compgl(P) iff(U,M) is a model o//\gcompgl(P). 

Proof. The only notable difference from the proof of Theorem 4.12 is the pres- 
ence of generalized literals, which are handled by the observation that (U, M) \= 
£ (U, M) \= £ 9 for a generalized literal £. □ 

Theorem 7.7. Let P be a fully guarded p-gP. f\ gcompgl(P) is an alternation- 
free /iGF formula. 

Proof. The proof is analogous to the proof of Theorem 4.13. □ 

Theorem 7.8. Let P be a GgP and q an n-ary predicate in P. q is satisfiable 
w.r.t. Piff3X-p(X,0,q)A/\gcom-pgl((P i ) p ) is satisfiable. Moreover, this reduction 
is polynomial. 
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PROOF. We have that P l is a FGgP. By Theorem 7.4, we have that (P f ) p is 
a fully guarded p-gP, thus the formula /\ gcompgl((P f ) ) is defined. By Theorem 
7.3, we have that q is satisfiablc w.r.t. P iff q is satisfiablc w.r.t. P f . By Theorem 
6.7, we have that q is satisfiablc w.r.t. P i iff 3X • p(X, 0, q) A /\ compgl((P f ) ) 
is satisfiablc. Finally, Theorem 7.6 yields that q is satisfiable w.r.t. P iff 3X • 
p(X, 0, q) A A gcompgl((P f ) ) is satisfiablc. □ 

COROLLARY 7.9. Satisfiability checking w.r.t. GgPs can be polynomially reduced 
to satisfiability checking of alternation-free fi GF-formulas. 

Proof. For a GgP P, we have, by Theorem 7.7, that f\ gcomp((P f ) ) is an 
alternation-free /zGF, which yields with Theorem 7.8, the required result. □ 

Corollary 7.10. Satisfiability checking w.r.t. GgPs is in 2-exptime. 

Proof. Since satisfiability checking of /xGF formulas is 2-EXPTiME-complctc 
(Theorem [1.1] in [Gradel and Walukiewicz 1999]), satisfiability checking w.r.t. 
GgPs is, by Corollary 7.9, in 2-exptime. □ 

Thus, adding generalized literals to guarded programs does not come at the cost of 
increased complexity of reasoning, as also for guarded programs without generalized 
literals, reasoning is in 2-exptime, see Theorem 4.16. 

In [Syrjanen 2004], to-restricted programs allow for cardinality constraints and 
conditional literals. Conditional literals have the form X.L : A where X is a set of 
variables, A is an atom (the condition) and L is an atom or a naf-atom. Intuitively, 
conditional literals correspond to generalized literals VX ■ A L, i.e., the de- 
fined reducts add instantiations of L to the body if the corresponding instantiation 
of A is true. However, conditional literals appear only in cardinality constraints 
Card(b, S) 27 where S is a set of literals (possibly conditional), such that a for all 
effect such as with generalized literals cannot be obtained with conditional literals. 

Take, for example, the rule q <— [VAT • b(X) =>■ a(X)] and a universe U = 
{xi,x 2 } with an interpretation containing b(xi) and b{x2)- The reduct will con- 
tain a rule q <— a(x\),a{x2) such that, effectively, q holds only if a holds ev- 
erywhere where b holds. The equivalent rule rewritten with a conditional literal 
would be something like q <— Card(n,{X.a(X) : b(X)}), resulting 28 in a rule 
q <— Card(n,{a(xi),a(x2)})- In order to have the for all effect, we have that 
n must be 2. However, we cannot know this n in advance, making it impossible to 
express a for all restriction. 

8. RELATIONSHIP WITH DATALOG LITE 

We define Datalog lite as in [Gottlob et al. 2002]. A Datalog rule is a rule a <— [3 
where a = {a} for some atom a and [3 does not contain generalized literals. A 
basic Datalog program is a finite set of Datalog rules such that no head predicate 
appears in negative bodies of rules. Predicates that appear only in the body of 
rules are extensional or input predicates. Note that equality is, by the definition of 
rules, never a head predicate and thus always extensional. The semantics of a basic 



27 Card(b, S) is true if at least b elements from S are true. 
28 Assume we again have a universe {xi,X2}. 
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Datalog program P, given a relational input structure U defined over extensional 
predicates of P 29 , is given by the unique (subset) minimal model of Sp whose 
restriction to the extensional predicates yields U (£p are the first-order clauses 
corresponding to P, see [Abiteboul et al. 1995]). 

For a query (P, q), where P is a basic Datalog program and q is an n-ary predicate, 
we write a £ (P, q)(U) if the minimal model M of £p with input U contains q(a). 
We call (P, q) satisfiable if there exists a U and an a such that a G (P, q){U). 

A program P is a stratified Datalog program if it can be written as a union of 
basic Datalog programs (Pi, . . . , P„), so-called strata, such that each of the head 
predicates in P is a head predicate in exactly one stratum P^. Furthermore, if a 
head predicate in Pi is an extensional predicate in Pj, then i < j. This definition 
entails that head predicates in the positive body of rules are head predicates in 
the same or a lower stratum, and head predicates in the negative body are head 
predicates in a lower stratum. The semantics of stratified Datalog programs is 
defined stratum per stratum, starting from the lowest stratum and defining the 
extensional predicates on the way up. For an input structure U and a stratified 
program P = (Pi, . . . , P„), define as in [Abiteboul et al. 1995]: 

U Q =U 

=W i _iUP i (W i _i|ed6(P i )) 

where Si = Pi(Ui-i\edb{Pi)) is the minimal model of Y,p i among those models of 
Sp ; whose restriction to the extensional predicates of Pi (i.e., edb(Pi)) is equal to 
Ui-i\edb(Pi). The least fixed point model with input U of P is per definition U n . 

A Datalog LITE generalized literal is a generalized literal VY • a b where a 
and b are atoms and vars(b) C vars(a). Note that Datalog lite generalized literals 
VY • a b can be replaced by the equivalent VZ • a => b where Z = Y\{F | Y ^ 
vars(a)}, i.e., with the variables that are not present in the formula a =^ b removed 
from the quantifier. After such a rewriting, Datalog lite generalized literals are 
guarded according to Definition 4.5. 

A Datalog lite program is a stratified Datalog program, possibly containing 
Datalog lite generalized literals in the positive body, where each rule is monadic 
or guarded. A rule is monadic if each of its (generalized) literals contains only 
one (free) variable; it is guarded if there exists an atom in the positive body that 
contains all variables (free variables in the case of generalized literals) of the rule. 
The definition of stratified is adapted for generalized literals: for a VY • a =$> b in 
the body of a rule where the underlying predicate of a is a head predicate, this 
head predicate must be a head predicate in a lower stratum (i.e., a is treated as 
a naf-atom) and a head predicate underlying b must be in the same or a lower 
stratum (i.e., b is treated as an atom). The semantics can be adapted accordingly 
since a is completely defined in a lower stratum, as in [Gottlob et al. 2002]: every 
generalized literal VY • a =>■ b is instantiated (for any x grounding the free variables 
X in the generalized literal) by /\{fe[X | x][Y | y] | a[X | x][Y | y] is true}, which is 
well-defined since a is defined in a lower stratum than the rule where the generalized 
literal appears. 



9 We assume that an input structure always defines equality, and that it does so as the identity 
relation. 
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8.1 Reduction from GgPs to Datalog LITE 

In [Gottlob et al. 2002], Theorem 8.5., a Datalog LITE query {i^ v ,q v ) was denned 
for an alternation-free fiGF sentence <p such that 



(U, M)\=ip <==^ (TT v ,q v )(M U id{U)) evaluates to true , 



where the latter means that q v is in the fixed point model of n v with input MUid(U) 
and id(U) = {x = x \ x e U}. 

Example 8.1. Take the ^GF sentence gcomp(P) = A<^2A(^3A</?4 from Example 
4.11, i.e., with 



ipx = \/X ■ p(X) => p(X) V ->p(X) 

V2 =yX-r(X)^p(X) 

<p 3 =VX-p(X)^r(X) 

if 4 = VX ■ p(X) =>• [LFP WX .<j>(W , X)](X) 



and 4>{W,X) = W{X) V (W(X) Ar(X)). The query (7r gcomp(P) , g gcomp(P) ) considers 
atoms and negated atoms as extensional predicates and introduces rules 



H PiVl {X) - p(X) 
H^ V1 {X) <- p(X)^p(X) 



for fx where both rules are guarded by the guard p{X) of ipi (or, in general, the 
guard in the most closely encompassing scope). Disjunction is defined as usual: 



H p v^p, Vl ( x ) P(X),H PtV>1 (X) 
(X) - p(X),H^,(X) 



where p(X) serves again as guard. 30 The sentence ipi itself is translated into 



H V1 <- (VX-p(X) =>H py ^ Vl {X)) 



Formulas ip 2 and ip 3 can be translated similarly. For if4, we translate, as an 
intermediate step, <fi(W, X) as 



H+(X) <- p(X),H w (X) 
H^X) «- p(X),H WAr (X) 
H WAr (X) <- p(X),H w (X),H r (X) 
H W (X) <- p(X), W(X) 
H r (X) <- p{X),r{X) 



from which the translation for [LFP WX.(j>(W, X)] (X) can be obtained by replacing 
H^X) and W(X) by H [LFP wx.<p(w,x)](x), i.e., 



H WAr {X) «- p(X),H w (X),H r {X) 
H W (X) <— p(X),H[ hFP wx .<t>(w ,x)]{X) 
H r (X) <- p(X),r(X) 



30 Actually, in this particular case, the rules would already be guarded without the guard of ipi, 
but we include it, as this is not true in general. 



H[LFP WX.<f>(W,X)] (X) 
H[LFP WX.<f>(W,X)] (X) 



p(X),H w (X) 
p(X),H WAr (X) 
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The sentence ip^ is translated to 



H.. 



(VX • p(X) H[ LFP wx .<i>(w ,x)]{X)) 



Finally, we compile the results in the rule g gC0 mp(p) H Vl , H V2 , H Vs , H V4 . 

In Example 4.11, we had, for a universe {x}, the unique model ({a;},0) of 
gcomp(P). Accordingly, we have that {x = x} is the only relational input structure 
on the extensional predicates of 7r gcomp (p), r and p, that contains the term x and 
results in a least fixed point model of 7r gcomp (p) containing q gcomp (p). 

For the formal details of this reduction, we refer to [Gottlob ct al. 2002] . Satisfiabil- 
ity checking w.r.t. GgPs can be polynomially reduced, using the above reduction, 
to satisfiability checking in Datalog LITE. 

Theorem 8.2. Let P be a GgP, q an n-ary predicate in P, and ip the [iGF 
sentence 3X ■ p(X, 0, q) A /\ gcomp((P f ) ). q is satisfiable w.r.t. P iff (ir v , q v ) is 
satisfiable. Moreover, this reduction is polynomial. 

PROOF. By Theorem 7.8, we have that q is satisfiable w.r.t. P iff ip is satisfiable. 
Since ip is a /iGF sentence, we have that ip is satisfiable, i.e., there exists a (U,M) 
such that (U,M) \= ip, iff (tt v , q v )(M U id(U)) evaluates to true, i.e., (n v ,q v ) is 
satisfiable. 

Since, by Theorem 7.8, the translation of P to (p is polynomial in the size of P and 
the query (n v ,q v ) is polynomial in ip [Gottlob et al. 2002], we have a polynomial 
reduction. □ 

8.2 Reduction from Datalog LITE to GgPs 

For stratified Datalog programs, possibly with generalized literals, least fixed point 
models with as input the identity relation on a universe U coincide with open answer 
sets with universe U. 

LEMMA 8.3. Let P = (Pi, . . . , P n ) be a stratified Datalog program, possibly with 
generalized literals, and U an input structure for P. If p(x) € Sj, then p is a head 
predicate in Pj or p G Uj-i\edb(Pj). 

PROOF. Either p e edb(Pj) or not. In the former case, we have that p(x) e 
Sj\edb(Pj) such that, by the definition of Sj, p(x) £ Uj-\\edb(Pj). In the latter 
case, we have that, since p does not appear in the body of Pj, but nevertheless p(x) 
is in Sj , a minimal model of Pj , p must be a head predicate in Pj . □ 

Lemma 8.4. Let P = (Pi, . . . , P n ) be a stratified Datalog program, possibly with 
generalized literals, U an input structure for P. If p is a head predicate in some Pj, 
1 < j < n, then 



If p £ edb(Pj) andp(x) &"Uj-i, then p(x) £"U n . 

PROOF. The "only if direction of Equation (36) is immediate. For the "if 
direction: assume p is a head predicate in Pj and p(x) £ U n . Since p(x) £ U n , 
there must be a k, such that p(x) £ Sk, 1 < k < n. 

If k = j, we are finished, otherwise, by Lemma 8.3, p(x) £ Uk-i\ edb(Pk) and thus 
p(x) £ Uk-i- Again, we have that there is a 1 < k\ < k — 1, such that p(x) £ Sk 1 - 




(36) 
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If k\ = j, we are finished, otherwise, we continue as before. After at most n steps, 
we must find a k n — j, otherwise we have a contradiction (p(x) G U is not possible 
since p is a head predicate and input structures are defined on extensional predicates 
only). 

Take p extensional in Pj, p(x) £ Uj-i, and p(x) G U n . We show that this leads 
to a contradiction. From p(x) £ U ni we have that p{x) G U n -i or p(x) G S„. For 
the latter, one would have, with Lemma 8.3, that p(x) G W n _i|ec?6(P„) or p is a 
head predicate in S n . The latter is impossible since p G edb(Pj) and j < n. Thus, 
we have that p(x) G U n ^\. 

Continuing this way, we eventually have that p(x) G Uj-\, a contradiction. □ 

Theorem 8.5. Let P = (Pi,...,P„) &e a stratified Datalog program, possibly 
with generalized literals, U a universe for P , and I a literal. For the least fixed 
point model U n of P with input U = {id(U)}, we have U n \= I iff there exists an 
open answer set (U, M) of P such that M (= I. 

Moreover, for any open answer set (U, M) of P, we have that M — U n \id(U). 

Proof. For the "only if direction, assume U n \= I. Define 

M=U n \id{U) . 

Clearly, M \= I, such that remains to show that (U, M) is an open answer set of P. 

(1) M is a model of R = (p^ u > M ">)M . 

Take a rule r : a[X | x] ^ /3[X | x] + , (/3[X | X ] X ) X (^ M ) G R, thus M \= not /?[]", 
originating from a <— f3 G P. Assume M \= body(r). We have that VX ■ /\ [3 => 
sSSpj for some stratum Pi. Take x as in r. 

We verify that U n \= /\[3[\. We have that U n \= A/ 3 + A A^fllV ■ Take a 
generalized literal VY ■ c => b in /\/3[] and U n \= c[Y | y]. Then A'/ |= c[] such 
that 60 G (/?[X | x] x ) x (^ M ), and thus, with M |= 6[], that W„ |= 6[]. 
With Theorem 15.2.11 in [Abiteboul et al. 1995], we have that U n is a model 
of Sp, such that a[] eM„, and thus M \= a[]. 

(2) M is a minimal model of R = (p x <^ M ))M_ 

Assume not, then there is a N C M, model of i?. Define N' = N \J id(U). 
Since M\N ^ 0, we have that U n \N' ^ 0. Since £Y = irf(?7), we have 
W„ = id(C7) U Si U . . . U S n , such that there is a 1 < j < n, where Sj \N' ^ 
and Uj-i C AT'. Define A,- = Sj\(Sj\N'). One can show that A, C Sj, 
NjledbiPj) =Uj-i\edb(Pj), and Nj is a model of , which is a contradiction 
with the minimality of Sj. 

For the "if direction, assume (U,M) is an open answer set of P with M \= I. 
Assume U n ^ I. Define M' = U n \id{U). By the previous direction, we know that 
(U,M r ) is an open answer set of P with M' ^= I, such that M \= I and M' I. 
Note that M \= p(x) <==^> M' |= p(x) for extensional predicates p in P. Indeed, 
assume M \= p(x), then p(x) must be in the head of an applied rule since M is 
an answer set, contradicting that p is extensional, unless p is an equality, and then 
|= p(x) such that M' |= p(x). The other direction is similar. 

One can show per induction on fc, that for a head predicate p in Pt, M |= p(x) 
iff M' |= p(x), resulting in M = M', and thus in particular we have a contradiction 
for /, such that / G U n . 
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In particular, we have M = M' = U n \id(U), which proves the last part of the 
Theorem. □ 

From Theorem 8.5, we obtain a generalization of Corollary 2 in [Gclfond and Lif- 
schitz 1988] (If II is stratified, then its unique stable model is identical to its fixed 
point model.) for stratified Datalog programs with generalized literals and an open 
answer set semantics. 

COROLLARY 8.6. Let P be a stratified Datalog program, possibly with generalized 
literals, and U a universe for P. The unique open answer set (U, M) of P is 
identical to its least fixed point model (minus the equality atoms) with input structure 
id(U). 

We generalize Theorem 8.5, to take into account arbitrary input structures U. For 
a stratified Datalog program P, possibly with generalized literals, define Fp = 
{(j(X) V not g(X) <— | q extensional (but not =) in P}. 

Theorem 8.7. Let P = (P±, . . . , P n ) be a stratified Datalog program, possibly 
with generalized literals, and I a literal. There exists an input structure U for P 
with least fixed point model U n such that U n \= I iff there exists an open answer set 
(U, M) of PUFp such that M \= I. 

PROOF. For the "only if direction, assume U n \= I. Define U = cts(P UW) and 

M = U n \id(U) . 

Clearly, M (= I, and one can show, similarly to the proof of Theorem 8.5, that 
(17, M) is an open answer set of P. 

For the "if direction, assume (U, M) is an open answer set of PUFp with M \= I. 
Define 

U = id(U) U {?(x) | g(x) £ M A q extensional (but not equality) in P} . 

Take U n the least fixed point model with input U. Assume U n \/= I. Define M' = 
U n \id(U). By the previous direction, we know that (cts(U U P)(= U),M') is an 
open answer set of P with M' \£ I, such that M \— I and M' ^ I. The rest of the 
proof is along the lines of the proof of Theorem 8.5. □ 

The set of free rules Fp ensures a free choice for extensional predicates, a behavior 
that corresponds to the free choice of an input structure for a Datalog program P. 
Note that PUFp is not a Datalog program anymore, due to the presence of naf in 
the heads of Fp. 

Define a Datalog litem program as a Datalog lite program where all rules 
are guarded (instead of guarded or monadic). As we will see below this is not a 
restriction. As Fp contains only free rules, PUFp is a GgP if P is a Datalog LITEM 
program. Furthermore, the size of the GgP P U Fp is linear in the size of P. 

Theorem 8.8. Let P be a Datalog litem program. Then, P U F P is a GgP 
whose size is linear in the size of P. 

Proof. Immediate by the Definition of Datalog litem (note also the remark at 
pp. 39) and the fact that Fp is a set of free rules and thus has no influence on the 
guardedness of P. □ 
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Satisfiability checking of Datalog LITEM queries can be reduced to satisfiability 
checking w.r.t. GgPs. 

Theorem 8.9. Let (P,q) be a Datalog litem query. Then, (P,q) is satisfiable 
iff q is satisfiable w.r.t. the GgP P U Fp. Moreover, this reduction is linear. 

PROOF. Immediate by Theorems 8.7 and 8.8. □ 

Theorems 8.2 and 8.9 lead to the conclusion that Datalog litem and open ASP 
with GgPs are equivalent (i.e., satisfiability checking in either one of the formalisms 
can be polynomially reduced to satisfiability checking in the other). Furthermore, 
since Datalog litem, Datalog lite, and alternation-free ^GF are equivalent as well 
[Gottlob et al. 2002], we have the following result. 

Theorem 8.10. Datalog LITE, alternation-free fiGF, and open ASP with GgPs 
are equivalent. 

Satisfiability checking in both GF and LGF is 2-EXPTiME-complete [Griidel 1999], 
as are their (alternation-free) extensions with fixed point predicates ^GF and /iLGF 
[Gradcl and Walukicwicz 1999]. Theorem 8.10 gives us then immediately the fol- 
lowing complexity result. 

Theorem 8.11. Satisfiability checking w.r.t. GgPs is 2-EXPTlME-complete. 

Some extra terminology is needed to show that satisfiability checking w.r.t. (L)GPs 
(i.e., without generalized literals) is 2-EXPTlME-complete as well. 

Recursion-free stratified Datalog is stratified Datalog where the head predicates 
in the positive bodies of rules must be head predicates in a lower stratum. We call 
recursion-free Datalog litem, Datalog liter, where the definition of recursion-free 
is appropriately extended to take into account the generalized literals. 

For a Datalog liter program P, let ->-iP be the program P with all generalized 
literals replaced by a double negation. E.g., 

q(X) ^ f(X),VY ■ r(X,Y) ^ s(Y) 

is rewritten as the rules 

q{X)<-f{X),not q'(X) 

and 

q'{X) <- r(X, Y),not s(Y) . 

As indicated in [Gottlob et al. 2002], this yields an equivalent program -i->P, where 
the recursion-freeness ensures that is stratified. 32 

Theorem 8.12. Let P be a Datalog liter program. Then U F-,-, P is a 

GP. 



31 Note that {jt v ,q v ) is a Datalog LITEM query [Gottlob et al. 2002], 

32 Note that this translation cannot work for arbitrary generalized programs as the antecedent of 
generalized literals can be an arbitrary boolean formula, which cannot appear in bodies of rules. 
Replace, e.g., r(X, Y) by r(X, Y) V d(X, Y). 
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Proof. Every rule in P is guarded, and thus every rule in -i-P is too. Since 
-i-iP U F-,-,p adds but free rules to ->->P, all non-free rules of -i-iP U F-,-,p are 
guarded. □ 

Satisfiability checking of Datalog liter queries can be linearly reduced to satisfia- 
bility checking w.r.t. GPs. 

Theorem 8.13. Let (P,q) be a Datalog liter query. (P,q) is satisfiable iff q is 
satisfiable w.r.t. the GP ->-P U P-,-,p. Moreover, this reduction is linear. 

PROOF. For a Datalog LITER query (P,q), ( _,_, P, q) is an equivalent stratified 
Datalog query. Hence, by Theorem 8.7, (->-P, q) is satisfiable iff q is satisfiable 
w.r.t. -i-iP U F~,^p. This reduction is linear since ->-P is linear in the size of P 
and so is -i-P U F-,-,p. □ 

Theorem 8.14. Satisfiability checking w.r.t. (L)GPs is 2-EXPTiME-complete. 

Proof. The reduction from alternation-free /zGF sentences ip to Datalog LITE 
queries (tt v , q v ) specializes, as noted in [Gottlob et al. 2002], to a reduction from GF 
sentences to recursion-free Datalog LITE queries. Moreover, the reduction contains 
only guarded rules such that GF sentences ip are actually translated to Datalog 
liter queries (n v ,q v ). 

Satisfiability checking in the guarded fragment GF is 2-EXPTiME-complete [Gradel 
1999], such that, using Theorem 8.13 and the intermediate Datalog LITER trans- 
lation, we have that satisfiability checking w.r.t. GPs is 2-EXPTiME-hard. The 
2-exptime membership was shown in Theorem 4.16, such that the completeness 
readily follows. 

Every GP is a LGP and satisfiability checking w.r.t. to the former is 2-exptime- 
complete, thus we have 2-EXPTiME-hardness for satisfiability checking w.r.t. LGPs. 
Completeness follows again from Theorem 4.16. □ 

9. CTL REASONING USING GUARDED GENERALIZED PROGRAMS 

In this section, we show how to reduce CTL satisfiability checking to satisfiability 
checking w.r.t. GgPs, i.e., guarded programs with generalized literals, thus arguing 
the usability of OASP as a suitable formalism for different kinds of knowledge 
representation. 

In order to keep the treatment simple, we will assume that the only allowed 
temporal constructs are AFg, E(p U q), and EXq, for formulas p and q. They are 
actually adequate in the sense that other temporal constructs can be equivalently, 
i.e., preserving satisfiability, rewritten using only those three [Huth and Ryan 2000]. 

For a CTL formula p, let clos(p) be the closure of p: the set of subformulas of p. 
We construct a GgP G U D p consisting of a generating part G and a defining part 
Dp. The guarded program G contains free rules (gi) for every proposition P € AP, 
free rules (172) that allow for state transitions, and rules (53) that ensure that the 
transition relation is total: 



[P](S)Vnot [P](S) «- 
next(S, N) V not next(S, N) <- 



(5i) 
(.92) 
(93) 



succ(S) <— next{S 1 N) 



<— S = S, not succ(S) 
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where [P] is the predicate corresponding to the proposition P. The S = S is 
necessary merely for having guarded rules; note that any rule containing only one 
(free) variable can be made guarded by adding such an equality. 

The GgP Dp introduces for every non-propositional CTL formula in clos(p) the 
following rules (we write [q] for the predicate corresponding to the CTL formula 
q G clos(p)); as noted before we tacitly assume that rules containing only one (free) 
variable S are guarded by S — S: 

— For a formula -^q in clos(j>), we introduce in D p the rule 

h 9 ](S)<-not [q](S) 

Thus, the negation of a CTL formula is simulated by negation as failure. 
— For a formula q A r in clos(p), we introduce in D p the rule 

[qAr](S)^[q](S),[r](S) 

Conjunction of CTL formulas thus corresponds to conjunction in the body. 
— For a formula AFq in clos(p), we introduce in D p the rules 

[AFqj(S) <— [q](S) (4) 
[M=q](S) <- V7V • nea*(S' ) AT) =► [AF q](N) (d§) 

We define AFq corresponding to the intuition that AFq holds if, either q holds at 
the current state (4) or for all successors, we have that AFq holds Note 
that we use generalized literals to express the for all successors part. Moreover, 
we explicitly use the minimal model semantics of (open) answer set programming 
to ensure that eventually [q] holds on all paths: one cannot continue to use rule 
(d§) to motivate satisfaction of AFq, at a certain finite point, one is obliged to 
use rule (4) to obtain a finite motivation. 

— For a formula E(q U r) in clos(p), we introduce in D p the rules 

[E(«Ur)](S)^[r](S) (d 4 ) 
[E(q U r)](S) [q](S),next(S,N),[E(q U r)](N) (d B ) 

based on the intuition that there is a path where q holds until r holds (and r 
eventually holds) if either r holds at the current state (<&i), or q holds at the 
current state and there is some next state where again E(q U r) holds (d§). The 
minimality will again make sure that we eventually must deduce r with rule (^4). 

— For a formula EXq in clos(p), we introduce in D p the rule 

[EXq]{S)<-next(S,N),[q](N) 

saying that EXq holds if there is some successor where q holds. 

Note that replacing the generalized literal in (c?|) with a double negation has not 
the intended effect: 

[AFg](5) «- not q'(S) 

q'(S) «- next(S, N), not [AF q](N) 
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(d2) 



(d 6 ) 



A (fragment) of an open answer set could then be 



({•so, si, . . .}, {next(s , si), next(s 1 ,s 2 ), ■ 

[AFg](s ),[AFg]( Sl ),...}) , 

such that one would conclude that [AFg] is satisfiable while there is a path s , s\, . . . 
where q never holds. 

Example 9.1. Consider the absence of starvation formula t AFc, i.e., if a 
process tries (t) to access a critical section of code, it must eventually succeed in 
doing so (c). We rewrite this such that it does not contain =>, i.e., we consider the 
equivalent formula ->(t A ->AFc). For AP = {c, t}, the program G contains the rules 

[*](£) V not [*](£) «- 
[cKS) V not [c](S) <- 
next(S, N) V not raearf(S, iV) <- 

succ(S') <— next(S, N) 

<— S = S, not succ(S) 

The program D p , with p = A ^AFc), contains the rules 

[-.(* A-.AFc)](S) <- not [* A -.AFc](£) 
[* A-.AFc](£) <- [t](5),hAFc](S') 
hAFc](5) <- not [AFc] (5) 
[AFc] (5) - [c](5) 

[AFc] (S) <- V7V • next(S,N) [AFc] (TV) 

One can see that p is (CTL) satisfiable iff \p] is satisfiable w.r.t. G U D p . 

Theorem 9.2. Letp 6e a CTL formula, p is satisfiable iff[p] is satisfiable w.r.t. 
theGgPGUDp. 

Proof. For the "only if direction, assume p is satisfiable. Then there exists a 
model K = (S, R, L) of p such that K , s \= p, for a state s £ S. Define 

M = {next(s,t) | (s,t) G R} U {succ(s) \ (s,t) G P} 
U {[g](s) | A",s |= q Aq G cZos(p)} . 

Then \p](s) G M; one can show that (5, M) is an open answer set of G U Z? p . 

For the "if direction, assume (U, M) is an open answer set of G U D p such that 
\p](s) G M for some s, where p is a CTL formula. Define the model K = (U, R, L) 
with R = {(s,t) | next(s,t) G M}, and L(s) = {P | [P](s) G M A P G AP}. 
Remains to show that .fT is a structure and K,s \= p. 

The relation R is total, indeed, assume not, then there is a t G f, which has no 
successors in R. Then, there is no next(t, t') G M, such that succ(t) $ M, and the 
constraint (03) gives a contradiction. One can prove per induction on the structure 
of a CTL formula q, that 

K,s\=q <j=> [g](s)GM . 

□ 
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Since CTL satisfiability checking is EXPTiME-complete (see Theorem 2.5, pp. 11) 
and satisfiability checking w.r.t. GgPs is 2-EXPTlME-complete (see Theorem 8.11, 
pp. 44), the reduction from CTL to GgPs does not seem to be optimal. However, 
we can show that the particular GgP G U D p is a bound GgP for which reasoning 
is indeed EXPTiME-complete and thus optimal. 

The width of a formula ip is the maximal number of free variables in its subfor- 
mulas [Gradcl 2002b]. Wc define bound programs by looking at their first-order 
form and the arity of its predicates. 

Definition 9.3. Let P be a gP. Then, P is bound if every formula in sat(P) is 
of bounded width and the predicates in P have a bounded arity. 

For a CTL formula p, one has that G U D p is a bound GgP. 

Theorem 9.4. Let p be a CTL formula. Then, G U D p is a bound GgP. 

Proof. Every subformula of formulas in sat(G U D p ) contains at most 2 free 
variables and the maximum arity of the predicates is 2 as well. □ 

Theorem 9.5. Satisfiability checking w.r.t. bound GgPs is EXPTiME-complete. 

PROOF. Let P be a bound GgP. We have that (P l ) is bound and one can check 
that 3X • p(X, 0,q) A f\ gcompgl((P 4 ) p ) is of bounded width. Note that formula 
(26) on pp. 32 contains a £>(X). The condition that each formula in sat(P) is of 
bounded width is not enough to guarantee that p(X) has bounded width. Add, 
e.g., ground rules r to P with increasing arities of predicates. Although the width 
of formulas in sat(P) remains constant (no variables are added), the arity of p(X) 
in Formula (26) increases, thus increasing the width. Hence, the restriction that 
the arity of predicates in P should be bounded as well. 

By Theorem 7.8 and 7.9, one can reduce satisfiability checking of a bound GgP 
to satisfiability of a ^GF-formula with bounded width. The latter can be done in 
exptime by Theorem 1.2 in [Gradel and Walukiewicz 1999], such that satisfiability 
checking w.r.t. bound GgPs is in exptime. 

The EXPTiME-hardness follows from Theorem 9.2 and the EXPTiME-hardness of 
CTL satisfiability checking (Theorem 2.5). □ 

As indicated in [Gottlob et al. 2002], the objects in the database form the states 
of the Kripke model. In the open domain case, one, intuitively, allows, of extra 
states in the Kripke model, not explicitly listed in the database. 

10. CONCLUSIONS AND DIRECTIONS FOR FURTHER RESEARCH 

We embedded OASP in FPL and used this embedding to identify (loosely) guarded 
OASP, a decidable fragment of OASP. Finite ASP was reduced to loosely guarded 
OASP. Satisfiability checking w.r.t. (loosely) guarded OASP was shown to be 2- 
EXPTlME-complete. We defined GgPs, guarded programs with generalized literals, 
under an open answer set semantics, and showed 2-EXPTiME-completeness of sat- 
isfiability checking by a reduction to /iGF. Furthermore, we translated Datalog 
litem programs to GgPs, and generalized the result that the unique answer set of 
a stratified program is identical to its least fixed point. We showed how to optimally 
simulate CTL in OASP. 



48 



We plan to extend GgPs to loosely guarded gPs, where a guard may be a set of 
atoms; a reduction to the loosely guarded fixed point logic should then provide for 
decidability. More liberal generalized literals, with the consequent a conjunction 
of atoms and naf-atoms instead of just an atom, does not affect the definition of 
the GeLi-reduct, but the FPL translation requires modification to ensure no fixed 
point variable appears negatively. 

We plan to look into the correspondence with Datalog and use decidability results 
for Datalog satisfiability checking, as, e.g., in [Halevy et al. 2001], to search for 
dccidable fragments under an open answer set semantics. 

Although adding generalized literals to guarded programs does not increase the 
complexity of reasoning, it does seem to increase expressivity: one can, for example, 
express infinity axioms. Given the close relation with Datalog lite and the fact that 
Datalog lite without generalized literals cannot express well-founded statements, 
it seems unlikely that guarded programs without generalized literals can express 
infinity axioms; this is subject to further research. 

We only considered generalized literals in the positive body. If the antecedents 
in generalized literals are atoms, it seems intuitive to allow also generalized literals 
in the negative body. E.g., take a rule a <— (3, not [VA ■ b(X) =>■ a(X)]; it seems 
natural to treat not [VA ■ 6(A) => a(X)] as 3X ■ b(X) A -ia(X) such that the rule 
becomes a <— (3,b(X),not a(X). A rule like [VA • b(X) => a(X)\ V a <— (3 is more 
involved and it seems that the generalized literal can only be intuitively removed 
by a modified GeLi-reduct. 

We established the equivalence of open ASP with GgPs, alternation- free uGF, 
and Datalog lite. Intuitively, Datalog lite is not expressive enough to simulate 
normal uGF since such fiGF formulas could contain negated fixed point variables, 
which would result in a non-stratified program when translating to Datalog lite 
[Gottlob et al. 2002]. Open ASP with GgPs does not seem to be sufficiently expres- 
sive either: fixed point predicates would need to appear under negation as failure, 
however, the GL-reduct removes naf-literals, such that, intuitively, there is no real 
recursion through naf-literals. Note that it is unlikely (but still open) whether 
alternation-free uGF and normal uGF arc equivalent, i.e., whether the alternation 
hierarchy can always be collapsed. 

In [Gottlob et al. 2002] one also discusses the data complexity which is simpler 
than the combined complexity as studied here. For the future, we also investigate 
the data complexity of reasoning in guarded Open Answer Set Programming. 
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